CVE-2026-93559: Forget-C Jellyfish AI Short Drama Studio FastAPI dependencies.py missing authentication

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-18 · updated 2026-09-22
Weakness: CWE-287

Description

A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This affects an unknown function of the file backend/app/dependencies.py of the component FastAPI. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The reported GitHub issue was closed automatically due to inactivity.

Affected products

Forget-C Jellyfish AI Short Drama Studio: 0.1.0-alpha, 0.2.0, 0.3.0, 0.3.1, 0.3.2

References

https://github.com/Forget-C/Jellyfish/issues/37
https://vuldb.com/cve/CVE-2026-93559
https://vuldb.com/submit/943920
https://vuldb.com/vuln/407460
https://vuldb.com/vuln/407460/cti

Get alerted when CVE-2026-93559 or the next vulnerability affects your stack