Read the docs

facefusion

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

facefusion records in CISA KEV

No facefusion vulnerabilities are listed in CISA KEV.

Records

1 record

Priority HIGH 77

facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside the jobs directory.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00564 Published 2026-09-02 Fixed in 3.7.0 CWE-22
Open these records in search →