MediumVulnerability
CVE-2026-122159: Edge0-AI Audio8_TTS path traversal via slow_decode_models argument
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-122159
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
A path traversal flaw exists in the Model Path Resolution component of Edge0-AI Audio8_TTS, up to commit 1d64afcc2da56222b41ddcf53de7b8bc54be1fb6, tracked as CVE-2026-122159. It sits in ArkTtsRuntime.__init__ in onnx_runtime_0_1b_int8/arktts_runtime/runtime.py, where manipulating the slow_decode_models argument can lead to path traversal. The attack can be carried out remotely, and a public exploit is available.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-122160: myshell-ai AIlice HuggingFace Model Wrapper untrusted model loadingSimilar attack · NVD/CVE Database
- MediumCVE-2026-122235: Jan workspace guard bypass allows file writes outside workspace via symlinksSimilar attack · NVD/CVE Database
- HighCVE-2026-122135: Mistral Vibe remote code execution via repository gpg.program settingSimilar attack · NVD/CVE Database
- HighCVE-2026-122134: Mistral Vibe remote code execution through malicious Git filter driversSimilar attack · NVD/CVE Database
- HighCVE-2026-122133: Mistral Vibe untrusted search path code execution via git.exe on WindowsSimilar attack · NVD/CVE Database