Facefusion vulnerabilities
We track 1 vulnerability in Facefusion products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 2, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Facefusion vulnerabilities
- 7.5 High severity
facefusion: Improper Limitation of a Pathname to a Restricted Directory
facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to cre