CVE-2026-121940

The Stonewuu ai-fusion-video software (versions before 1.3.0 ) is affected by an Insecure Direct Object Reference (IDOR) vulnerability. Authenticated users can access other users' projects by providing unscoped object IDs. By enumerating auto-increment IDs on the /api/project , /api/asset , and /...