Executive brief
fishaudio Bert-VITS2 is an open-source text-to-speech tool. A security flaw in its web interface allows remote attackers to bypass folder restrictions and create or overwrite configuration files in unauthorized locations on the server. This could lead to service disruptions or the corruption of application settings.
Technical details
A path traversal vulnerability exists in the generate_config function within webui_preprocess.py of the Gradio interface. The application fails to sanitize the data_dir argument before passing it to os.path.join and os.mkdir, allowing an attacker to use traversal sequences (e.g., ../) to escape the intended ./data directory. A remote, unauthenticated attacker can exploit this to create arbitrary directories and write JSON configuration files (config.json) to arbitrary locations on the host filesystem. This can result in configuration poisoning or a denial of service by overwriting critical application files. As of the advisory date, the vendor has not responded to the disclosure.
Affected products
- fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c
Timeline
- 2026-04-23: disclosed: Public disclosure via GitHub Gist
- 2026-05-17: advisory: CVE published to NVD