CVE-2026-121940 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
Stonewuu ai-fusion-video before 1.3.0 does not check that an object id belongs to the requesting user on its project, asset and script API handlers. A logged-in user can enumerate sequential ids to read, overwrite or cascade-delete other users' projects and add themselves as members.
first public Nov 4, 2026 · 1 source
Is this in your stack? Find out in 2 minutes.
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Teams that run ai-fusion-video as a shared, multi-user service are exposed, because any authenticated account can reach other users' records by guessing ids. Single-user local installs with only one account are less exposed. The sources do not say whether the default configuration enables multi-user access.
Not affected if no-untrusted-accounts, single-user
Who cares ai-fusion-video, self-hosted, video-generation
package.json/api/project, /api/asset and /api/script are reachable by user accounts other than your own1.3.0 or later (per the patch linked in the sources)Stonewuu ai-fusion-video before 1.3.0 contains an insecure direct object reference vulnerability that allows authenticated users to access other users' projects by supplying unscoped object ids. Attackers can enumerate auto-increment ids on /api/project, /api/asset and /api/script handlers to read, overwrite, cascade-delete data, and add themselves as project members.
This page as .md · .json · in your agent: get_signal("CVE-2026-121940") · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.