CVE-2026-62312

9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin args passed to child_process.spawn(), allowing malicious custom plugins to execute commands through /api/mcp//sse. This issue is fixed in version 0.5.2.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/decolua/9router/commit/da667836cc7584bea0edd893de1d590c9ea279dc
https://github.com/decolua/9router/releases/tag/v0.5.2
https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp
https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp

Configurations

No configuration.

History

24 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) 9Router es un router de IA y ahorrador de tokens. Antes de la versión 0.5.2, 9Router permite a un atacante remoto autenticado lograr la ejecución de código arbitrario en el sistema operativo anfitrión al combinar un bypass del encabezado Host de rutas solo de localhost con argumentos de plugin MCP no validados pasados a child_process.spawn(), permitiendo que plugins personalizados maliciosos ejecuten comandos a través de /api/mcp//sse. Este problema está solucionado en la versión 0.5.2.

Information

Published : 2026-07-15 21:16

Updated : 2026-10-24 21:10

NVD link : CVE-2026-62312

Mitre link : CVE-2026-62312

CVE.ORG link : CVE-2026-62312

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2026-62312", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-62312", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-16T18:51:17.611560Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "decolua", "product": "9router", "versions": [{"status": "affected", "version": "< 0.5.2"}]}]}], "published": "2026-07-15T21:16:55.810", "references": [{"url": "https://github.com/decolua/9router/commit/da667836cc7584bea0edd893de1d590c9ea279dc", "source": "security-advisories@github.com"}, {"url": "https://github.com/decolua/9router/releases/tag/v0.5.2", "source": "security-advisories@github.com"}, {"url": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp", "source": "security-advisories@github.com"}, {"url": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin args passed to child_process.spawn(), allowing malicious custom plugins to execute commands through /api/mcp//sse. This issue is fixed in version 0.5.2."}, {"lang": "es", "value": "9Router es un router de IA y ahorrador de tokens. Antes de la versi\u00f3n 0.5.2, 9Router permite a un atacante remoto autenticado lograr la ejecuci\u00f3n de c\u00f3digo arbitrario en el sistema operativo anfitri\u00f3n al combinar un bypass del encabezado Host de rutas solo de localhost con argumentos de plugin MCP no validados pasados a child_process.spawn(), permitiendo que plugins personalizados maliciosos ejecuten comandos a trav\u00e9s de /api/mcp//sse. Este problema est\u00e1 solucionado en la versi\u00f3n 0.5.2."}], "lastModified": "2026-10-24T21:10:00.130", "sourceIdentifier": "security-advisories@github.com"}