CVE-2026-46339 Details
Description
9Router is an AI router & token saver. From 0.4.30 until 0.4.37, 9Router's src/proxy.js middleware did not protect /api/cli-tools/* and /api/mcp/*, allowing unauthenticated registration of customPlugins through src/app/api/cli-tools/cowork-settings/route.js and command execution through the MCP bridge. This vulnerability is fixed in 0.4.37.
A critical remote code execution vulnerability has been identified in 9Router versions 0.4.30 prior to 0.4.37. The issue arises from the application's middleware not properly securing certain API endpoints, allowing unauthenticated users to register custom plugins that execute commands on the server. This vulnerability exploits the lack of authentication on the '/api/cli-tools/*' and '/api/mcp/*' routes, enabling arbitrary command execution as the user running the 9Router process.
Users can update to 9Router version 0.4.37 or later, where this vulnerability has been patched. Additionally, for those using version 0.4.37, it is recommended to apply the fixes outlined in the GitHub advisory GHSA-fhh6-4qxv-rpqj, which include extending the middleware matcher to protect the unguarded routes, validating the 'command' field in the custom plugin registration, and sanitizing plugin names.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 15, 2026CISA-ADP
Assessed Jul 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/decolua/9router/security/advisories/GHSA-fhh6-4qxv-rpqj | CISA-ADP | AdvisoryExploitRemedyTechnical AnalysisVendor |
| https://github.com/decolua/9router/commit/992f4db4a0d858bcc86b4786f2abab117a6ccdf8 | [email protected] | Source CodeVendor |
| https://github.com/decolua/9router/security/advisories/GHSA-fhh6-4qxv-rpqj | [email protected] | AdvisoryExploitRemedyTechnical AnalysisVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| decolua 9router | >= 0.4.30, < 0.4.37 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 16, 2026 | CVE Modified | CISA-ADP |
| Jul 15, 2026 | New CVE Received | [email protected] |