Skip to content
OpenAdvisories

Vendor

facefusion

1 known vulnerabilities.

Products

facefusion 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-84702

    facefusion before 3.7.0 Path Traversal via Job Identifier

    facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to cr…

    facefusion facefusion