Threat database

9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, but open-sse/translator/concerns/image.js performs the later server-side image fetch with a separate DNS resolution. An authenticated attacker with access to the LLM proxy can use a vision-capable model and an attacker-controlled DNS name that first resolves to a public IP and then rebinds to an internal address, allowing server-side requests to internal-only HTTP services. This issue is fixed in version 0.5.2.

CVE-2026-55500 is a critical vulnerability in decolua 9router versions prior to 0.4.80. The /api/settings/database endpoint allows unauthenticated full database export and import, exposing sensitive information such as credentials, API keys, OAuth tokens, and settings. The vulnerability arises because the endpoint only requires validation via the ALWAYS_PROTECTED middleware, which accepts JWT or CLI tokens without sufficient authentication. This issue is fixed in version 0.4.80.

CVE-2026-55501 is a vulnerability in decolua 9router prior to version 0.4.80 where the dashboard login rate limiter relies on the X-Forwarded-For HTTP header to identify clients. Because this header is attacker-controlled and spoofable, an attacker can bypass the rate limiting by rotating the header value, allowing unlimited brute-force login attempts. This issue is fixed in version 0.4.80.

9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint (this route is not covered by the dashboard middleware matcher, so no authorization check is applied). The sudoPassword field from the request body is written to the stdin of a 'sudo -S sh' child process. When sudo does not prompt for a password (the process runs as root, NOPASSWD is configured, or a recent sudo timestamp cache exists), the sudoPassword value is interpreted by sh as a shell command, allowing a remote unauthenticated attacker to execute arbitrary OS commands. Exploitation evidence was first observed by the Shadowserver Foundation on 2026-07-04 (UTC).

CVE-2026-10269 is a medium severity vulnerability in decolua 9router versions up to 0.4.0. It involves improper authorization due to manipulation of the Host argument in the isAuthenticated function within the HTTP Header Handler component. This flaw can be exploited remotely. The issue is addressed by upgrading to version 0.4.1.

A security vulnerability has been detected in decolua 9router up to 0.3.47. The impacted element is an unknown function of the file /api of the component Administrative API Endpoint. The manipulation leads to authorization bypass. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.3.75 is sufficient to resolve this issue. It is suggested to upgrade the affected component.