CVE-2026-116485 danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints
CriticalCVSS 9.3
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMIN_TOKEN is unset. Attackers can send POST requests to /api/env/set, /api/env/add, or /api/env/del to set ADMIN_TOKEN, lock out operators, redirect OTHER_SERVER or PROXY_URL for SSRF, and trigger redeployment.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huangxd- danmu_api | < 1.21.7 | 1.21.7 |
References
- GitHub Issue #531 issue-tracking
- Fix Commit patch
- github.com technical-description
- github.com product
- VulnCheck Advisory: danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints third-party-advisory