ACE Music - Free Suno Alternative Generate unlimited AI music for free using ACE-Step 1.5. Full songs with vocals, lyrics, any genre, any language. No subscription, no credits, no limits. The open-source Suno alternative, powered by ACE Music's free API.

• Analyzed: May 12, 2026, 4:20 AM
• Findings: 1
• Version: 1.0.0
• Hash: c1076c130f034c9a59d60325ab01ffa0072168095dd728bac968bf8602425a05
• Source: palm
• External report: View on VirusTotal

Findings (1)

The `scripts/generate.sh` file contains two significant vulnerabilities. Firstly, it is susceptible to JSON injection, as parameters like `--duration`, `--bpm`, and `--key` are directly inserted into the JSON request body without proper escaping, allowing an attacker to inject arbitrary JSON fields (e.g., `--duration '10,"malicious_field":"value"'`). Secondly, it has a path traversal vulnerability via the `--output` parameter, which allows an attacker to specify an output filename with directory traversal sequences (e.g., `../../evil.mp3`), potentially leading to arbitrary file writes on the system where the agent is running.