CVE-2026-43624: F5-TTS path traversal in finetune Gradio handlers allows arbitrary file writes

Summary

F5-TTS through version 1.1.20 has a path traversal flaw (CVE-2026-43624) in its finetune Gradio handlers. User-supplied project names are passed unsanitized to os.path.join(), so unauthenticated attackers can write arbitrary files, including via absolute paths such as /tmp/EVIL that override the base directory, anywhere the server process can write.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• HighGHSA-64vx-6h2c-rjh7: Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCESimilar attack · GitHub Advisory Database
• MediumHacking on Autopilot: Inside ARTEX Cybercrime CampaignsSimilar attack · Check Point Research
• MediumCVE-2026-122160: myshell-ai AIlice HuggingFace Model Wrapper untrusted model loadingSimilar attack · NVD/CVE Database
• MediumCVE-2026-122159: Edge0-AI Audio8_TTS path traversal via slow_decode_models argumentSimilar attack · NVD/CVE Database
• MediumCVE-2026-122235: Jan workspace guard bypass allows file writes outside workspace via symlinksSimilar attack · NVD/CVE Database