CVE-2026-93559 Forget-C Jellyfish AI Short Drama Studio FastAPI dependencies.py missing authentication
Attackers can bypass authentication in the FastAPI backend of Jellyfish AI Short Drama Studio to access protected resources without credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-93559?
CVE-2026-93559 is a medium-severity missing authorization vulnerability in Forget-C Jellyfish AI Short Drama Studio, published on 18 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This affects an unknown function of the file backend/app/dependencies.py of the component FastAPI. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The reported GitHub issue was closed automatically due to inactivity.
Which versions are affected by CVE-2026-93559?
How do I fix CVE-2026-93559?
No fix has been published for CVE-2026-93559 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-93559 being exploited?
There is no known exploitation of CVE-2026-93559 in the wild and no public exploit code.
Sources
Also known as GHSA-x49x-q2gc-3px4.