Facefusion

An unauthenticated path traversal vulnerability in Facefusion versions 3.6.1 and earlier allows remote attackers to perform arbitrary file writes via malicious job identifiers.