CVE-2026-8081 is a server-side request forgery (SSRF) vulnerability in router-for-me CLIProxyAPI version 6.9.29. The flaw exists in the API Interface component, specifically in the file internal/api/handlers/management/api_tools.go, where manipulation of the 'url' argument can lead to SSRF. Remote exploitation is possible, and public exploit details have been disclosed. The vendor has not responded to the disclosure, and no patch or remediation guidance is currently available.