CVE Intelligence

Facefusion Facefusion vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Facefusion Facefusion: 1 record(s), with affected versions and fixes.

CVE-2026-84702 High · 7.5 CWE-22 Sep 1, 2026
facefusion before 3.7.0 Path Traversal via Job Identifier
facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations.