CVE-2026-110213

The Stonewuu ai-fusion-video application (versions through 1.2.0 ) is vulnerable to an Insecure Direct Object Reference (IDOR) in its generation task item endpoints. The root cause allows authenticated users to access the generation results of other users by providing arbitrary, auto-incrementing...

CVE-2026-110213 ai-fusion-video through 1.2.0 Insecure Direct Object Reference in Generation Task Item Endpoints

Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' generation results by supplying arbitrary task ids. Attackers can enumerate auto-increment task ids on the image and video /items endpoints to...