Hearing the Whispers: Black-Box Membership Inference Attacks on Finetuned TTS Models

Text-to-Speech TTS foundation models are increasingly fine-tuned on private datasets to synthesize highly personalized voices, introducing severe privacy risks by exposing both biometric identities and sensitive speech content. Existing black-box membership inference attacks MIAs follow a two-sta...

CVE-2026-43624

F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsanitized user-supplied project names directly to os.path.join without validating the resulting path stays within the...

depthflow (0.9.1), f5-tts (1.1.7) +10 more potentially affected by CVE-2026-10783 via gradio (5.35.0)

gradio PYPI version 5.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - depthflow 0.9.1 - f5-tts 1.1.7 - iflow-mcp-pdfmathtranslate-pdf2zh 1.9.11 - mseep-pdf2zh 1.9.11 - paper-reader 0.1.0 - particleanalyzer =0.1.28,...

CVE-2026-43624

F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsanitized user-supplied project names directly to os.path.join without validating the resulting path stays within the...

CVE-2026-43624

F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsanitized user-supplied project names directly to os.path.join without validating the resulting path stays within the...

CVE-2026-43624

F5-TTS up to v1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsanitized project names to os.path.join() without validating the resulting path. An attacker can supply absolute paths (e.g., /t...

CVE-2026-43624 F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()

F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsanitized user-supplied project names directly to os.path.join without validating the resulting path stays within the...

CVE-2026-43624 F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()

F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsanitized user-supplied project names directly to os.path.join without validating the resulting path stays within the...

CVE-2026-43624: Improper Limitation of a Pathname to a Restricted Directory

F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsanitized user-supplied project names directly to os.path.join without validating the resulting path stays within the...

depthflow (0.9.1), f5-tts (1.1.7) +10 more potentially affected by CVE-2026-28414 via gradio (5.35.0)

gradio PYPI version 5.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - depthflow 0.9.1 - f5-tts 1.1.7 - iflow-mcp-pdfmathtranslate-pdf2zh 1.9.11 - mseep-pdf2zh 1.9.11 - paper-reader 0.1.0 - particleanalyzer =0.1.28,...