Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
facefusion records in CISA KEVNo facefusion vulnerabilities are listed in CISA KEV.
Priority HIGH 77
facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside the jobs directory.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00564 · Published 2026-09-02 · Fixed in 3.7.0 CWE-22
Open these records in search →