A single eval() call in the get_list function of Fooocus’s meta_parser module allows an attacker to inject arbitrary Python code through a crafted styles payload in the EXIF metadata of an uploaded image. When the function processes the metadata, the injected code is executed with the privileges of the running application, compromising confidentiality, integrity, and availability of the host system. The vulnerability enables full control over the server without needing additional credentials.

Fooocus versions 2.1.854 through 2.5.5 are affected. The flaw lies in modules/meta_parser.py and can be triggered by any image that contains a malicious styles field in its EXIF metadata. No other vendors or products are listed; the impact is confined to installations of these specific Fooocus releases.

The vulnerability is a classic code‑execution flaw (CWE‑94) and is capable of being exploited remotely by any user that can upload an image. Although the EPSS score is less than 1% and the issue is not listed in CISA’s KEV catalog, the remote nature of the attack and the lack of network requirements make it highly attractive to adversaries. The CVSS score of 8.8 indicates high severity. Without a patch, attackers can spread the vulnerability simply by hosting or sharing malicious image files with users of the vulnerable system.