CVE-2024-28886 Information

Description

OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file (.ust file) an arbitrary OS command may be executed.

Reference

https://utau2008.xrea.jp/ https://jvn.jp/en/jp/JVN71404925/