Vulnerability CVE-2024-28886
Published: 2024-05-28

Description:
OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file (.ust file), an arbitrary OS command may be executed.

 References:
https://utau2008.xrea.jp/
https://jvn.jp/en/jp/JVN71404925/
Copyright 2026, cxsecurity.com

 

Back to Top