/

CVE-2026-121940

Severity:

HIGH RISK

(8.8)

CVE-2026-121940

Received

Vulnerability type

Category:

CWE:

CWE-639

Impact:

Severity:

HIGH RISK

(8.8)

CVSS version:

3.1

Catch this CVE while code is being written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Sources

SourceLink
github.comgithub.com/Stonewuu/ai-fusion-video/blob/v1.2.0/ai-fusion-video/src/main/java/com/stonewu/fusion/controller/project/ProjectController.java#L37-L113
github.comgithub.com/Stonewuu/ai-fusion-video/commit/4724a1a4173171c3d4d067f38840a6093a8c4d46
github.comgithub.com/Stonewuu/ai-fusion-video/issues/69
hackmd.iohackmd.io/@hieuPenguinnn/ai-fusion-video-idor-bola-project-asset
vulncheck.comvulncheck.com/advisories/stonewuu-ai-fusion-video-before-1.3.0-idor-via-project-asset-and-script-controllers
hackmd.iohackmd.io/@hieuPenguinnn/cve-2026-121940-ai-fusion-video-idor-bola-project-asset
Find out what's already
exploitable in your codebase.