CVE-2025-27786

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file removal in core.py. "outputttspath" in tts.py takes arbitrary user input and passes it to "runttsscript" function in core.py, which checks if the path in "outputttspath" exists, and if yes, removes...

CVE-2025-27786: Improper Limitation of a Pathname to a Restricted Directory

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file removal in core.py. outputttspath in tts.py takes arbitrary user input and passes it to runttsscript function in core.py, which checks if the path in outputttspath exists, and if yes, removes that...