CVE-2026-55500

Published: Jul 10, 2026Modified: Jul 10, 2026Deferred

9.9

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.1 / Impact: 6.0

Source: security-advisories@github.com (Secondary)

Description

9Router is an AI router & token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and settings) and full database import (complete overwrite) without any authentication requirement beyond the ALWAYS_PROTECTED middleware check, which only validates JWT or CLI token. This issue is fixed in version 0.4.80.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

https://github.com/decolua/9router/commit/0c7c9de00ae3ab81d6580e3cc368483c4c03f6fd

Source: security-advisories@github.com

https://github.com/decolua/9router/releases/tag/v0.4.80

Source: security-advisories@github.com

https://github.com/decolua/9router/security/advisories/GHSA-qvfm-67h2-2qfx

Source: security-advisories@github.com

https://github.com/decolua/9router/security/advisories/GHSA-qvfm-67h2-2qfx

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.