https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-27787.htmlhttps://patchthecve.com/cve/CVE-2025-27787.htmlWed, 17 Jun 2026 09:04:13 +0000HIGH 7.5: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to denial of service (DoS) in restart.py. `model_name` in train.py takes user input, and passes it to the `stop_train` function in restart.py, which uses it construct a path to a folder with `config.json`. That `confighttps://patchthecve.com/cve/CVE-2025-27786.htmlhttps://patchthecve.com/cve/CVE-2025-27786.htmlWed, 17 Jun 2026 09:04:13 +0000CRITICAL 9.1: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file removal in core.py. `output_tts_path` in tts.py takes arbitrary user input and passes it to `run_tts_script` function in core.py, which checks if the path in `output_tts_path` exists, and if yes, remohttps://patchthecve.com/cve/CVE-2025-27785.htmlhttps://patchthecve.com/cve/CVE-2025-27785.htmlWed, 17 Jun 2026 09:04:13 +0000HIGH 7.5: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's `export_index` function. This issue may lead to reading arbitrary files on the Applio server. It can also be used in conjunction with blind server-side request forgery to read fileshttps://patchthecve.com/cve/CVE-2025-27784.htmlhttps://patchthecve.com/cve/CVE-2025-27784.htmlWed, 17 Jun 2026 09:04:13 +0000HIGH 7.5: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's `export_pth` function. This issue may lead to reading arbitrary files on the Applio server. It can also be used in conjunction with blind server-side request forgery to read files fhttps://patchthecve.com/cve/CVE-2025-27783.htmlhttps://patchthecve.com/cve/CVE-2025-27783.htmlWed, 17 Jun 2026 09:04:13 +0000CRITICAL 9.8: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file write in train.py. This issue may lead to writing arbitrary files on the Applio server. It can also be used in conjunction with an unsafe deserialization to achieve remote code execution. As of time ohttps://patchthecve.com/cve/CVE-2025-27782.htmlhttps://patchthecve.com/cve/CVE-2025-27782.htmlWed, 17 Jun 2026 09:04:12 +0000CRITICAL 9.8: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file write in inference.py. This issue may lead to writing arbitrary files on the Applio server. It can also be used in conjunction with an unsafe deserialization to achieve remote code execution. As of tihttps://patchthecve.com/cve/CVE-2025-27781.htmlhttps://patchthecve.com/cve/CVE-2025-27781.htmlWed, 17 Jun 2026 09:04:12 +0000CRITICAL 9.8: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in inference.py. `model_file` in inference.py as well as `model_file` in tts.py take user-supplied input (e.g. a path to a model) and pass that value to the `change_choices` and later to `get_https://patchthecve.com/cve/CVE-2025-27780.htmlhttps://patchthecve.com/cve/CVE-2025-27780.htmlWed, 17 Jun 2026 09:04:12 +0000CRITICAL 9.8: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in model_information.py. `model_name` in model_information.py takes user-supplied input (e.g. a path to a model) and pass that value to the `run_model_information_script` and later to `model_ihttps://patchthecve.com/cve/CVE-2025-27779.htmlhttps://patchthecve.com/cve/CVE-2025-27779.htmlWed, 17 Jun 2026 09:04:12 +0000CRITICAL 9.8: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in `model_blender.py` lines 20 and 21. `model_fusion_a` and `model_fusion_b` from voice_blender.py take user-supplied input (e.g. a path to a model) and pass that value to the `run_model_blendhttps://patchthecve.com/cve/CVE-2025-27778.htmlhttps://patchthecve.com/cve/CVE-2025-27778.htmlWed, 17 Jun 2026 09:04:12 +0000CRITICAL 9.8: Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in `infer.py`. The issue can lead to remote code execution. As of time of publication, a fix is available on the `main` branch of the Applio repository but not attached to a numbered release.https://patchthecve.com/cve/CVE-2025-27777.htmlhttps://patchthecve.com/cve/CVE-2025-27777.htmlWed, 17 Jun 2026 09:04:12 +0000HIGH 7.5: Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) in `model_download.py` (line 195 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itshttps://patchthecve.com/cve/CVE-2025-27776.htmlhttps://patchthecve.com/cve/CVE-2025-27776.htmlWed, 17 Jun 2026 09:04:12 +0000MEDIUM 5.3: Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 240 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities onhttps://patchthecve.com/cve/CVE-2025-27775.htmlhttps://patchthecve.com/cve/CVE-2025-27775.htmlWed, 17 Jun 2026 09:04:12 +0000MEDIUM 5.3: Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 143 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities onhttps://patchthecve.com/cve/CVE-2025-27774.htmlhttps://patchthecve.com/cve/CVE-2025-27774.htmlWed, 17 Jun 2026 09:04:12 +0000MEDIUM 5.3: Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 156 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on