{"id":"EUVD-2026-42930","enisaUuid":"aa8fa6cc-7c17-38b9-9984-89413260a6ed","description":"9Router is an AI router \u0026 token saver. Prior to 0.5.2, 9router determines whether a /v1 LLM proxy request is local by reading the client-controlled Host header, allowing a remote unauthenticated attacker to send Host: localhost and bypass API-key authentication. In the default configuration, this exposes the /v1 proxy to upstream provider calls using stored provider credentials and allows /v1/search with the searxng provider_options.baseUrl parameter to drive server-side requests to internal or cloud-metadata hosts. This issue is fixed in version 0.5.2.","datePublished":"Jul 10, 2026, 3:36:05 PM","dateUpdated":"Jul 10, 2026, 7:06:14 PM","baseScore":8.2,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","references":"https://github.com/decolua/9router/security/advisories/GHSA-86m2-fcxq-5q7c\nhttps://github.com/decolua/9router/commit/b282f0554972ea35281520738759d76abcd0b0b3\nhttps://github.com/decolua/9router/releases/tag/v0.5.2\n","aliases":"CVE-2026-55641\nGHSA-86m2-fcxq-5q7c\n","assigner":"GitHub_M","epss":0.33,"enisaIdProduct":[{"id":"e2a1a98b-6ea4-3389-b010-d8402590e503","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"\u003c 0.5.2"}],"enisaIdVendor":[{"id":"0983e5b7-2900-3e01-8c11-a571d927c44a","vendor":{"name":"decolua"}}],"enisaIdVulnerability":[{"id":"2ddf56e8-d825-3c4f-8bc7-930439f92119","vulnerability":{"id":"GHSA-86m2-fcxq-5q7c","description":"9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF","datePublished":"Aug 28, 2026, 6:33:20 PM","dateUpdated":"Aug 28, 2026, 6:33:20 PM","baseScore":0.0,"references":"https://github.com/decolua/9router/security/advisories/GHSA-86m2-fcxq-5q7c\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-55641\nhttps://github.com/decolua/9router/commit/b282f0554972ea35281520738759d76abcd0b0b3\nhttps://github.com/decolua/9router\nhttps://github.com/decolua/9router/releases/tag/v0.5.2\n","enisa_id":"EUVD-2026-42930\n","aliases":"GHSA-86m2-fcxq-5q7c\nCVE-2026-55641\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:05:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"fe023d45-2305-3108-bf84-d6ef8d124c14","vulnerability":{"id":"CVE-2026-55641","description":"9Router is an AI router \u0026 token saver. Prior to 0.5.2, 9router determines whether a /v1 LLM proxy request is local by reading the client-controlled Host header, allowing a remote unauthenticated attacker to send Host: localhost and bypass API-key authentication. In the default configuration, this exposes the /v1 proxy to upstream provider calls using stored provider credentials and allows /v1/search with the searxng provider_options.baseUrl parameter to drive server-side requests to internal or cloud-metadata hosts. This issue is fixed in version 0.5.2.","datePublished":"Jul 10, 2026, 3:36:05 PM","dateUpdated":"Jul 10, 2026, 7:06:14 PM","status":"PUBLISHED","baseScore":8.2,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","references":"https://github.com/decolua/9router/security/advisories/GHSA-86m2-fcxq-5q7c\nhttps://github.com/decolua/9router/commit/b282f0554972ea35281520738759d76abcd0b0b3\nhttps://github.com/decolua/9router/releases/tag/v0.5.2\n","enisa_id":"EUVD-2026-42930\n","assigner":"GitHub_M","epss":0.33,"dataProcessed":"Nov 7, 2026, 7:20:15 AM","vulnerabilityProduct":[{"id":"3d6764d3-8bad-3f67-b838-3eb9ce79c949","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"\u003c 0.5.2"}],"vulnerabilityVendor":[{"id":"e49c1d7e-e3dd-35b0-84d7-b37d6b71453c","vendor":{"name":"decolua"}}]}}],"enisaIdAdvisory":[]}