danmu_api - Unauthenticated Access to Admin API via Default Token

danmuapi before 1.21.7 contains an authentication bypass caused by default TOKEN usage and unset ADMINTOKEN, letting unauthenticated attackers modify server environment configuration via specific API endpoints, exploit requires default token configuration. id: CVE-2026-116485 info: name: danmuapi...