Read the docs
TI-2026-40861 Aliases CVE-2026-56678GHSA-6mwv-4mrm-5p3m

9Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding

Priority MEDIUM 62CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

9Router is an AI router & token saver. Prior to 0.5.6, the Kiro API-key validation endpoint POST /api/oauth/kiro/api-key builds an upstream URL using a user-controlled region value, allowing an authenticated attacker to supply a crafted region such as kiro-canary.local:8443# and cause 9Router to send the Kiro validation request to an attacker-controlled host while forwarding the submitted Kiro API key as an Authorization header. This issue is fixed in version 0.5.6.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0021 11th percentileScored 2026-11-07
Fix Fixed 9router (decolua): 0.5.69router (npm): 0.5.6

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
decolua9routerbefore 0.5.60.5.6Patch availableCNA
—9router (npm)before 0.5.60.5.6Patch availableGHSA-6mwv-4mrm-5p3m
  • 9router Vendordecolua Affected before 0.5.6 Fixed in 0.5.6 Patch available CNA
  • 9router (npm) Vendor— Affected before 0.5.6 Fixed in 0.5.6 Patch available GHSA-6mwv-4mrm-5p3m

Remediation

  • Fix · CNA 9router (decolua) Fixed in 0.5.6
  • Fix · GHSA-6mwv-4mrm-5p3m 9router (npm) Fixed in 0.5.6 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-56678
  2. 2026-10-03 Alias added: GHSA-6mwv-4mrm-5p3m

References

Advisory 1

Other 4

  • TI-2026-36526 9Router: Hardcoded Default fallback JWT Secret Allows Authentication Bypass CVSS 3.1CRITICAL 9.8
  • TI-2026-34059 9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes CVSS 3.1CRITICAL 10.0
  • TI-2026-44499 9Router 0.4.41 - Unauthenticated API Key Exposure via /api/usage/stats CVSS 4.0CRITICAL 9.3
  • TI-2026-42622 9Router 0.4.41 - Unauthenticated API Exposure via /api/providers CVSS 4.0CRITICAL 9.3
  • TI-2026-44500 9Router 0.4.41 - Unauthenticated Information Disclosure via API Usage Endpoints CVSS 4.0HIGH 8.7
  • TI-2026-40860 9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint CVSS 3.1HIGH 8.6
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences