Remote Code Execution Vulnerability in Tencent FaceDetection-DSFD Resnet

CVE-2025-13715

What is CVE-2025-13715?

The Tencent FaceDetection-DSFD product has a vulnerability that enables remote attackers to execute arbitrary code on affected installations. This vulnerability is rooted in the resnet endpoint, where insufficient validation of user-supplied data may lead to the deserialization of untrusted data. Exploiting this flaw necessitates user interaction, as the target must navigate to a malicious page or open infected files. Once successfully exploited, attackers can execute code within the context of the root user, posing a significant security risk.

References