CVE-2026-62312

{
  "id": "CVE-2026-62312",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-15T21:16:55.810",
  "lastModified": "2026-10-24T21:10:00.130",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin args passed to child_process.spawn(), allowing malicious custom plugins to execute commands through /api/mcp//sse. This issue is fixed in version 0.5.2."
    },
    {
      "lang": "es",
      "value": "9Router es un router de IA y ahorrador de tokens. Antes de la versión 0.5.2, 9Router permite a un atacante remoto autenticado lograr la ejecución de código arbitrario en el sistema operativo anfitrión al combinar un bypass del encabezado Host de rutas solo de localhost con argumentos de plugin MCP no validados pasados a child_process.spawn(), permitiendo que plugins personalizados maliciosos ejecuten comandos a través de /api/mcp//sse. Este problema está solucionado en la versión 0.5.2."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "decolua",
          "product": "9router",
          "versions": [
            {
              "version": "< 0.5.2",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-16T18:51:17.611560Z",
          "id": "CVE-2026-62312",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/decolua/9router/commit/da667836cc7584bea0edd893de1d590c9ea279dc",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/decolua/9router/releases/tag/v0.5.2",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}