facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations.

FaceFusion versions through 3.6.1 contain a path traversal vulnerability in the get_job_file_name function due to failure to normalize job identifiers. Attackers can supply directory traversal sequences in the job identifier parameter to write files outside the intended jobs directory. The vulnerability is exploitable through an unauthenticated HTTP API, making it accessible without credentials. This allows attackers to create or overwrite files at arbitrary locations on the server filesystem. The issue has been patched in FaceFusion version 3.7.0. A fix was committed in commit a2cbfd73b10191e51ed2eb1e83c19121153e0a22 in the job_manager.py file. The unauthenticated nature of the attack surface significantly increases the risk and ease of exploitation. Researchers at VulnCheck and geo-chen have published advisories detailing the vulnerability.