F5-TTS vulnerabilities

CVEs whose affected-version data names the F5-TTS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-43624High· 8.2

5mo ago

F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()

F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsanitized user-supplied project names directly to os.path.j…

▾ TwilightSWivid · F5-TTSEPSS 0.59%via CVEORG