TI-2026-80400 CVE-2026-116485 · GHSA-m7f5-h255-c4xv
Authentication bypass in danmu_api lets attackers change server settings
Priority MEDIUM 53
danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMIN_TOKEN is unset.