CVE-2026-46339

CriticalCVSS 10.0

Published: 15/07/2026(UTC)Updated: 16/07/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.57%

91th percentile - higher than 91% of all known CVEs

Summary

In 9Router versions 0.4.30 through 0.4.37, the middleware in src/proxy.js did not protect /api/cli-tools/* and /api/mcp/*, allowing unauthenticated plugin registration and command execution via the MCP bridge. This vulnerability is fixed in version 0.4.37.

Risk Assessment

An unauthenticated attacker can register malicious plugins and execute arbitrary commands on the server, leading to full system compromise.

Recommendation

Immediately upgrade 9Router to version 0.4.37 or later. If upgrading is not possible, block access to /api/cli-tools/* and /api/mcp/* paths at the network firewall.

Original NVD description (English source)

9Router is an AI router & token saver. From 0.4.30 until 0.4.37, 9Router's src/proxy.js middleware did not protect /api/cli-tools/* and /api/mcp/*, allowing unauthenticated registration of customPlugins through src/app/api/cli-tools/cowork-settings/route.js and command execution through the MCP bridge. This vulnerability is fixed in 0.4.37.