CVE-2026-43624: Swivid f5-Tts

High severity, CVSS 8.2. EPSS: 0.6% chance of exploitation in the next 30 days.

F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsanitized user-supplied project names directly to os.path.join() without validating the resulting path stays within the intended base directory. Attackers can supply absolute path arguments such as /tmp/EVIL to override the base directory entirely and create arbitrary directories with attacker-controlled JSON content at any filesystem path writable by the server process.

Affected products

• Swivid f5-Tts: up to and including 1.1.20

Published 2026-06-01. Last modified 2026-07-22.