CVE-2024-39685 | FishAudio Bert-VITS2 up to 2.3 resample data_dir os command injection (GHSL-2024-045)

A vulnerability was found in FishAudio Bert-VITS2 up to 2.3. It has been rated as very critical. Affected by this issue is the function resample. The manipulation of the argument data_dir leads to os command injection.

This vulnerability is handled as CVE-2024-39685. The attack may be launched remotely. There is no exploit available.