A path traversal vulnerability exists in fishaudio Bert-VITS2 up to commit 8f7fbd8c4770965225d258db548da27dc8dd934c in the _get_all_models function of hiyoriUI.py (Model Handler component). This vulnerability allows remote attackers to manipulate file paths, potentially leading to unauthorized file access. The vulnerability is publicly disclosed with an exploit published, but the vendor has not provided any response or patch. The product uses continuous delivery with rolling releases, so exact affected or fixed versions are not specified.

The vulnerability enables remote attackers to perform path traversal attacks, which may allow unauthorized access to files outside the intended directories. This can lead to information disclosure or other impacts depending on the files accessed. No confirmed exploitation in the wild is reported. The medium CVSS score (6.9) reflects the network attack vector, no required privileges or user interaction, and low to limited impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should monitor for updates from fishaudio. Until a patch is released, consider restricting access to the affected component or applying application-level controls to validate and sanitize file path inputs to mitigate exploitation risk.