FishAudio vulnerabilities
We track 4 vulnerabilities in FishAudio products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 17, 2026.
Latest FishAudio vulnerabilities
- 7.3 High severity
Bert-VITS2: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. The impacted element is the function generate_config of the file webui_preprocess.py of the component Gradio Interface. Such manipulation of the argument dat
- 7.3 High severity
Bert-VITS2: Improper Limitation of a Pathname to a Restricted Directory
A flaw has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. The affected element is the function _get_all_models of the file hiyoriUI.py of the component Model Handler. This manipulation causes path traversal. The attack can b
- 9.8 Critical severity
Bert-VITS2: Improper Neutralization of Special Elements used in an OS Command
Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the data_dir variable is used directly in a command executed with subprocess.run(cmd, shell=True) in the bert_gen function, which leads to arbitrary command execution. This affects
- 9.8 Critical severity
Bert-VITS2: Improper Neutralization of Special Elements used in an OS Command
Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the data_dir variable is used directly in a command executed with subprocess.run(cmd, shell=True) in the resample function, which leads to arbitrary command execution. This affects