Vulnerabilidades de Facefusion
CVEs publicadas que afetam produtos de Facefusion: 1 registro(s), com severidade, exploração e correções.
CVE-2026-84702
Alta · 7.5
CWE-22 01/09/2026
facefusion before 3.7.0 Path Traversal via Job Identifier
facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations.