CVE-2026-51974 | lllyasviel Fooocus up to 2.5.5 modules/meta_parser.py get_list code injection

September 1, 2026 Yanac

A vulnerability identified as problematic has been detected in lllyasviel Fooocus up to 2.5.5. The affected element is the function get_list of the file modules/meta_parser.py. This manipulation causes code injection.

This vulnerability is tracked as CVE-2026-51974. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More