https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:23:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-335684 EUVD-2026-335684 https://cve.radiocsirt.org/vuln/euvd-2026-335684 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56675 <p>9Router is an AI router &amp; token saver. Prior to 0.5.2, 9router treats loopback requests as trusted and allows /v1/* access without an API key, so a same-host reverse proxy that forwards public traffic to the backend through 127.0.0.1 causes src/dashboardGuard.js to misclassify external requests as local. A remote unauthenticated attacker can access /v1 APIs such as /v1/models and may abuse configured upstream provider credentials through /v1 proxy endpoints depending on enabled providers. This issue is fixed in version 0.5.2.</p> <p>9Router is an AI router &amp; token saver. Prior to 0.5.2, 9router treats loopback requests as trusted and allows /v1/* access without an API key, so a same-host reverse proxy that forwards public traffic to the backend through 127.0.0.1 causes src/dashboardGuard.js to misclassify external requests as local. A remote unauthenticated attacker can access /v1 APIs such as /v1/models and may abuse configured upstream provider credentials through /v1 proxy endpoints depending on enabled providers. This issue is fixed in version 0.5.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56675 https://cve.radiocsirt.org/vuln/ghsa-x5c9-v98j-722r <p><strong>Affected:</strong> npm: 9router</p> <p>## Summary</p> <p>9router treats local loopback requests as trusted and allows access to `/v1/*` without an API key. In a documented/common reverse-proxy deployment where nginx forwards public traffic to the backend via `127.0.0.1`, external non-`Origin` requests are misclassified as local. This allows unauthenticated access to `/v1` APIs such as `/v1/models`, and may allow abuse of configured upstream provider credentials depending on the enabled providers.</p> <p>## Details</p> <p>- **Affected version / commit:** 9router `v0.4.80` @ `b282f05`. - **Deployment precondition:** a same-host reverse proxy (e.g. nginx) forwarding public traffic to the backend on `127.0.0.1` / `localhost`. This mirrors the documented cloud deployment (`proxy_pass http://localhost:20128` with `X-Real-IP` / `X-Forwarded-For`). - **Observed behaviour:** - The **direct backend** (`direct-backend`, port `18081`) returns `401` for `/v1/models` without an API key. - A **direct request that spoofs** `X-9r-Real-IP: 127.0.0.1` still returns `401`: the custom server deletes the client-supplied header and overwrites it with the real socket address, so naive header spoofing does not work against the direct backend. - The **proxied path** (`reverse-proxy`, port `18080`) returns `200` with the full model catalog for the same `/v1/models` request **without any API key**. - A **proxied request that carries an `Origin` header** returns `401`. The bypass therefore primarily affects curl / SDK / server-…</p> <p><strong>Affected:</strong> npm: 9router</p> <p>## Summary</p> <p>9router treats local loopback requests as trusted and allows access to `/v1/*` without an API key. In a documented/common reverse-proxy deployment where nginx forwards public traffic to the backend via `127.0.0.1`, external non-`Origin` requests are misclassified as local. This allows unauthenticated access to `/v1` APIs such as `/v1/models`, and may allow abuse of configured upstream provider credentials depending on the enabled providers.</p> <p>## Details</p> <p>- **Affected version / commit:** 9router `v0.4.80` @ `b282f05`. - **Deployment precondition:** a same-host reverse proxy (e.g. nginx) forwarding public traffic to the backend on `127.0.0.1` / `localhost`. This mirrors the documented cloud deployment (`proxy_pass http://localhost:20128` with `X-Real-IP` / `X-Forwarded-For`). - **Observed behaviour:** - The **direct backend** (`direct-backend`, port `18081`) returns `401` for `/v1/models` without an API key. - A **direct request that spoofs** `X-9r-Real-IP: 127.0.0.1` still returns `401`: the custom server deletes the client-supplied header and overwrites it with the real socket address, so naive header spoofing does not work against the direct backend. - The **proxied path** (`reverse-proxy`, port `18080`) returns `200` with the full model catalog for the same `/v1/models` request **without any API key**. - A **proxied request that carries an `Origin` header** returns `401`. The bypass therefore primarily affects curl / SDK / server-…</p> https://cve.radiocsirt.org/vuln/ghsa-x5c9-v98j-722r