CVE-2026-49353 Details
Description
9Router is an AI router & token saver. In 0.4.45 and earlier, 9Router's src/dashboardGuard.js local-only access gate used Host and Origin headers in isLocalRequest() to protect /api/mcp/*, /api/tunnel/*, and /api/cli-tools/*, allowing header spoofing in reverse proxy or tunnel deployments to reach MCP child process stdin paths.
A vulnerability exists in 9Router versions through 0.4.45, allowing bypass of a local-only access gate that protects sensitive API routes. The issue arises because the gate relies on the Host and Origin headers, which can be spoofed in reverse proxy or tunnel deployments. This manipulation enables unauthorized access to the MCP child process stdin paths, potentially leading to remote code execution.
Users are advised to update to version 0.5.30, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 15, 2026CISA-ADP
Assessed Jul 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/decolua/9router/security/advisories/GHSA-6g2f-w7g3-77vf | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/decolua/9router/commit/5e1c1261368e06dced1cbc650684561b2c8844db | [email protected] | Source CodeVendor |
| https://github.com/decolua/9router/commit/bb86808582067e4fc6f004508a919efb9970d1d5 | [email protected] | Source CodeVendor |
| https://github.com/decolua/9router/releases/tag/v0.4.46 | [email protected] | Release NotesVendor |
| https://github.com/decolua/9router/security/advisories/GHSA-6g2f-w7g3-77vf | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-290 | Authentication Bypass by Spoofing | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| decolua 9router | <= 0.4.55 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 16, 2026 | CVE Modified | CISA-ADP |
| Jul 15, 2026 | New CVE Received | [email protected] |