The vulnerability arises from reliance on untrusted input in a security decision within 9router's src/dashboardGuard.js, specifically in the isLocalRequest function. When requests reach Next.js without the sanitizing custom-server.js wrapper, the client-controlled X-9r-Real-Ip header is trusted to determine if the request is local. An attacker can set this header to 127.0.0.1, bypassing API key validation for /api/v1/* routes, including the GET /api/v1/models endpoint. This enables unauthorized use of the instance owner's configured large language model (LLM) providers, leading to potential credit consumption and information disclosure. The vulnerability is addressed by patching in version 0.5.6.

An unauthenticated remote attacker can bypass API key validation by spoofing the X-9r-Real-Ip header, gaining unauthorized access to protected API endpoints. This can result in unauthorized consumption of paid LLM provider credits and enumeration of configured providers and models, potentially causing financial loss and information disclosure.

Upgrade to version 0.5.6 or later, where this vulnerability is fixed. Ensure that requests to Next.js are properly sanitized using the custom-server.js wrapper to prevent trusting client-supplied headers for security decisions. Patch status is confirmed fixed in 0.5.6.