{"data":{"id":"b5ee2282-5ba1-441f-8301-fd012011f0d8","title":"CVE-2026-122159: A weakness has been identified in Edge0-AI Audio8_TTS up to 1d64afcc2da56222b41ddcf53de7b8bc54be1fb6. This affects the…","summary":"A path traversal flaw exists in the Model Path Resolution component of Edge0-AI Audio8_TTS, up to commit 1d64afcc2da56222b41ddcf53de7b8bc54be1fb6, tracked as CVE-2026-122159. It sits in ArkTtsRuntime.__init__ in onnx_runtime_0_1b_int8/arktts_runtime/runtime.py, where manipulating the slow_decode_models argument can lead to path traversal. The attack can be carried out remotely, and a public exploit is available.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-122159","publishedAt":"2026-11-05T03:17:20.920Z","cveId":"CVE-2026-122159","cweIds":["CWE-22"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Edge0-AI Audio8_TTS"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Edge0-AI Audio8_TTS path traversal via slow_decode_models argument","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-11-05T06:10:13.181Z","kevDateAdded":null,"advisoryAliases":["GHSA-w3m8-v566-4538"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-05T06:10:17.298Z","patchAvailable":null,"disclosureDate":"2026-11-05T03:17:20.920Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}