The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the server without authentication by fake ROM.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')