{"id":"EUVD-2026-42929","enisaUuid":"1112f322-b5f9-36dc-a5e7-8019148c0a7f","description":"9Router is an AI router \u0026 token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, but open-sse/translator/concerns/image.js performs the later server-side image fetch with a separate DNS resolution. An authenticated attacker with access to the LLM proxy can use a vision-capable model and an attacker-controlled DNS name that first resolves to a public IP and then rebinds to an internal address, allowing server-side requests to internal-only HTTP services. This issue is fixed in version 0.5.2.","datePublished":"Jul 10, 2026, 3:30:49 PM","dateUpdated":"Jul 13, 2026, 6:11:54 PM","baseScore":7.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","references":"https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx\nhttps://github.com/decolua/9router/commit/c7d07448c58bec1200741de0b73305b860416b82\nhttps://github.com/decolua/9router/releases/tag/v0.5.2\n","aliases":"CVE-2026-56676\nGHSA-cmhj-wh2f-9cgx\n","assigner":"GitHub_M","epss":0.19,"enisaIdProduct":[{"id":"15cd1a6b-e7e7-3a6d-9d55-efaaadf49a8d","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"\u003c 0.5.2"}],"enisaIdVendor":[{"id":"0c23fb93-0f85-3a06-8d9b-fc8660286422","vendor":{"name":"decolua"}}],"enisaIdVulnerability":[{"id":"86228862-70d8-370b-8204-c40757a70aa4","vulnerability":{"id":"CVE-2026-56676","description":"9Router is an AI router \u0026 token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, but open-sse/translator/concerns/image.js performs the later server-side image fetch with a separate DNS resolution. An authenticated attacker with access to the LLM proxy can use a vision-capable model and an attacker-controlled DNS name that first resolves to a public IP and then rebinds to an internal address, allowing server-side requests to internal-only HTTP services. This issue is fixed in version 0.5.2.","datePublished":"Jul 10, 2026, 3:30:49 PM","dateUpdated":"Jul 13, 2026, 6:11:54 PM","status":"PUBLISHED","baseScore":7.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","references":"https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx\nhttps://github.com/decolua/9router/commit/c7d07448c58bec1200741de0b73305b860416b82\nhttps://github.com/decolua/9router/releases/tag/v0.5.2\n","enisa_id":"EUVD-2026-42929\n","assigner":"GitHub_M","epss":0.19,"dataProcessed":"Oct 28, 2026, 7:16:45 AM","vulnerabilityProduct":[{"id":"e3bb11b0-85c9-3c3c-a9ce-4913176e89aa","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"\u003c 0.5.2"}],"vulnerabilityVendor":[{"id":"dc440135-9a0f-3044-a789-95c4803aa7fc","vendor":{"name":"decolua"}}]}},{"id":"ea38f7cc-8991-39c0-af52-224737874f96","vulnerability":{"id":"GHSA-cmhj-wh2f-9cgx","description":"9router: Image prefetch DNS rebinding allows SSRF to internal services","datePublished":"Sep 23, 2026, 6:12:28 PM","dateUpdated":"Sep 23, 2026, 6:12:28 PM","baseScore":0.0,"references":"https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-56676\nhttps://github.com/decolua/9router/commit/c7d07448c58bec1200741de0b73305b860416b82\nhttps://github.com/decolua/9router\nhttps://github.com/decolua/9router/releases/tag/v0.5.2\n","enisa_id":"EUVD-2026-42929\n","aliases":"GHSA-cmhj-wh2f-9cgx\nCVE-2026-56676\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}