Auth bypass in Forget-C Jellyfish Ai Short Drama Studio
CVE-2026-93559
A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This affects an unknown function of the file backend/app/dependencies.py of the component FastAPI. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The reported GitHub issue was closed automatically due to inactivity.
Vulnerability class: Broken Authentication
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Forget-c Jellyfish Ai Short Drama Studio — versions 0.1.0-alpha, 0.2.0, 0.3.0
Weakness classification (CWE)
References
- cna@vuldb.com (vdb-entry)
- cna@vuldb.com (signature, permissions-required)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (issue-tracking)
Frequently asked questions
- What is CVE-2026-93559?
- CVE-2026-93559 is a high-severity vulnerability in Forget-C Jellyfish Ai Short Drama Studio, classified under Improper Authentication. CVSS score: 7.3/10. Published 2026-09-18.
- How severe is CVE-2026-93559?
- High severity. CVSS v3 base score is 7.3 out of 10.