Remote Code Execution Vulnerability in Fooocus

오픈소스 AI 이미지 생성 WebUI인 Fooocus에서 원격 코드 실행(RCE) 취약점이 발견되었다. 이 취약점은 이미지 EXIF 메타데이터에 포함된 JSON을 eval 함수로 처리하는 과정에서 임의의 파이썬 코드가 실행될 수 있는 문제로, Fooocus를 인터넷에 노출하면 공격자가 시스템을 제어할 수 있다. Fooocus는 2024년 8월부터 제한적 장기 지원 모드에 들어갔으며, 2025년 9월 이후로는 유지보수가 중단된 상태라 보고된 취약점이 6개월간 패치되지 않았다. AI 개발자들은 공개된 취약점 내용을 참고해 Fooocus 사용 시 주의가 필요하다.

https://mrbruh.com/fooocus/

#security #rce #fooocus #opensource #python

Remote Code Execution Vulnerability in Fooocus

How I found a remote code execution vulnerability in the third most popular AI image generation software.

Generated this image using #Fooocus—just from a simple prompt, right on my laptop:
```
Kitty in Farm
```

https://github.com/lllyasviel/Fooocus?tab=readme-ov-file

🎯 FocusCatalog was born from a real need: keeping hundreds of Fooocus models under control. It scans folders (Checkpoint/LoRA), builds previews, shows trigger words & Civitai links, favorites & NSFW filter; fast search/sorting; path options + one-click refresh. Open-source, lightweight.

I hope that this thing I did for my own needs may also be useful to some of you.

Repo 👉 https://github.com/ShinRalexis/FocusCatalog

#FocusCatalog #Fooocus #StableDiffusion #LoRA #Checkpoint #OpenSource #LocalAI

The Time Zones

Buchholz et at, 2025

Prompts in description

#aiart #stablediffusion #fooocus

Bare in the Twilight City

Buchholz & co, 2025

Prompts in description

#aiart #stablediffusion #nsfw #nude #fooocus

Free tools for creativity!

#Upscayl, #rembg, #Fooocus, #Whisper, #LLAMA3 by Meta, #Mixtral8x22b, & more: These #opensource, #AI-powered tools make image editing, audio work, transcription, and Large Language Models (#LLMs) exploration fun and easy!

Learn more about these top picks by #FOSS mentor @morrolinux: https://lpi.org/zhya

@LPI #LPI #Tech #AI #freesoftware #MorroLinux #Linux #FOSS #opensource #Upscayl, #rembg, #Fooocus, #Whisper, #LLAMA3, #Mixtral8x22 @openai

The Wizard

Gris et al, 2025

Prompts in description

#aiart #stablediffusion #fooocus #surreal

The Cenotaph

Gilliland et al, 2025

Prompted with the text of eponymous poem by Fanny Howe: https://www.poetryfoundation.org/poetrymagazine/poems/55209/the-cenotaph

Prompts in description

#aiart #stablediffusion #fooocus

The Cat At The Sea Arch

Gilliland et al, 2025

Prompts in description

#aiart #stablediffusion #fooocus #surreal