Vulnerabilidades do Facefusion Facefusion

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Facefusion Facefusion: 1 registro(s), com versões afetadas e correções.

CVE-2026-84702 Alta · 7.5 CWE-22 01/09/2026

facefusion before 3.7.0 Path Traversal via Job Identifier

facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations.