CVE-2026-46339 | 9Router is an AI router & token saver. From 0.4.30 until 0.4… | CVSS 10.0 CRITICAL

Description

9Router is an AI router & token saver. From 0.4.30 until 0.4.37, 9Router's src/proxy.js middleware did not protect /api/cli-tools/* and /api/mcp/*, allowing unauthenticated registration of customPlugins through src/app/api/cli-tools/cowork-settings/route.js and command execution through the MCP bridge. This vulnerability is fixed in 0.4.37.

Metadata

CVE ID: CVE-2026-46339
State: PUBLISHED
Assigner: GitHub_M
Reserved: 2026-05-13 18:37 UTC
Published: 2026-07-15 20:41 UTC
Last updated: 2026-07-15 20:41 UTC
Primary CWE: CWE-78
CWE-78: Improper Neutralization of Special Elements used in …
Vendor / Product: decolua / 9router
Sources: cve.org · NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products (1)

Vendor	Product	Platform	Versions
decolua	9router	—	>= 0.4.30, < 0.4.37

Weakness (CWE)

CWE	Source	Description
CWE-306	cna	CWE-306: Missing Authentication for Critical Function
CWE-78	cna	CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSS scores (1)

Score	Severity	Version	Source	Vector
10.0	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References (2)

https://github.com/decolua/9router/security/advisories/GHSA-fhh6-4qxv-rpqj https://github.com/decolua/9router/security/advisories/GHSA-fhh6-4qxv-rpqj
https://github.com/decolua/9router/commit/992f4db4a0d858bcc86b4786f2abab117a6ccdf8 https://github.com/decolua/9router/commit/992f4db4a0d858bcc86b4786f2abab117a6ccdf8