Arbitrary code execution via unrestricted class path

Code injection in Gemelo AI Vocos 0.1.0 and earlier allows remote attackers to execute arbitrary code through a malicious model repository. instantiate_class in vocos/pretrained.py imports the configuration's unrestricted class_path, resolves it with getattr, and invokes the callable with attacker-supplied init_args. Execution requires an application user to load an attacker-controlled configuration or select a model repository the attacker controls.