Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
CVE-2026-46339: 9router: Unauthenticated Remote Code Execution via Unprotected Routes
GHSA-fhh6-4qxv-rpqj
CVE-2026-46339
CVE-2026-46339
CVE-2026-46339
Summary
The 9router software exposes unauthenticated API endpoints that can be used to execute arbitrary OS commands without any prerequisites or credentials. This vulnerability exists because the authentication middleware only guards a limited set of routes, leaving many others unprotected. To mitigate this issue, ensure that all API endpoints are properly authenticated and authorized.
What to do
- Update decolua 9router to version 0.4.37.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| npm | decolua | 9router |
>= 0.4.30, < 0.4.37 Fix: upgrade to 0.4.37
|
| – | decolua | 9router | >= 0.4.30, < 0.4.37 |
Original title
9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes
Original description
9Router is an AI router & token saver. From 0.4.30 until 0.4.37, 9Router's src/proxy.js middleware did not protect /api/cli-tools/* and /api/mcp/*, allowing unauthenticated registration of customPlugins through src/app/api/cli-tools/cowork-settings/route.js and command execution through the MCP bridge. This vulnerability is fixed in 0.4.37.
ghsa CVSS3.1
10.0
Vulnerability type
CWE-78
OS Command Injection
CWE-306
Missing Authentication for Critical Function
- https://github.com/decolua/9router/security/advisories/GHSA-fhh6-4qxv-rpqj
- https://github.com/advisories/GHSA-fhh6-4qxv-rpqj
- https://github.com/decolua/9router/commit/992f4db4a0d858bcc86b4786f2abab117a6ccd...
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46339... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-46339 Vendor Advisory
Published: 15 Jul 2026 · Updated: 18 Jul 2026 · First seen: 19 May 2026