Skip to content

Vendor

facefusion vulnerabilities

1 published CVE affecting facefusion, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of facefusion alerts

Products

Latest facefusion CVEs

Newest publication first

  1. CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier

    Published
    HighCVSS 8.7 EPSS 0.56%

    facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitra...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.