CVE-2026-108593: Improper Control of Generation of Code ('Code Injection') in decolua 9router

The vulnerability in decolua 9router (versions >=0.4.1 <=0.5.99) involves improper control of code generation via a configuration injection flaw in the POST /api/cli-tools/hermes-settings endpoint. Authenticated users can inject arbitrary keys into the Hermes Agent's config.yaml file by submitting a specially crafted baseUrl containing double quotes and newlines. This injection enables attackers to add hooks_auto_accept and a hooks.post_llm_call shell command that the Hermes Agent executes automatically after an LLM call, leading to unauthorized code execution.

Successful exploitation allows authenticated users to execute arbitrary shell commands on the system running the Hermes Agent without further approval, potentially leading to system compromise or unauthorized actions. The vulnerability requires authenticated access with high privileges and user interaction (UI:P). The CVSS 4.0 score of 7.3 reflects high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the dashboard to trusted users only and monitor for suspicious activity related to the Hermes Agent configuration. Avoid submitting untrusted input to the vulnerable endpoint.