CVE-2026-55641

Katalog CVE

CVSS 8.2 · High EPSS 0,32%

Kerentanan Authentication Bypass by Spoofing. Skor CVSS 3.1 8.2 (High) menurut github.com.

Deskripsi (NVD)

9Router is an AI router & token saver. Prior to 0.5.2, 9router determines whether a /v1 LLM proxy request is local by reading the client-controlled Host header, allowing a remote unauthenticated attacker to send Host: localhost and bypass API-key authentication. In the default configuration, this exposes the /v1 proxy to upstream provider calls using stored provider credentials and allows /v1/search with the searxng provider_options.baseUrl parameter to drive server-side requests to internal or cloud-metadata hosts. This issue is fixed in version 0.5.2.

Rincian

Terbit di NVD

10 Juli 2026

Terakhir diubah

10 Juli 2026

Status NVD

Deferred

CVSS 3.1

8.2 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-290: Authentication Bypass by Spoofing
CWE-348: Use of Less Trusted Source
CWE-918: Server-Side Request Forgery (SSRF)
CWE-1327: Binding to an Unrestricted IP Address

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 23,4% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/decolua/9router/commit/b282f0554972ea35281520738759d76abcd0b0b3
• https://github.com/decolua/9router/releases/tag/v0.5.2
• https://github.com/decolua/9router/security/advisories/GHSA-86m2-fcxq-5q7c