{"data":{"id":"73c884c5-41e7-4785-833e-93d2f4c0e6f6","title":"GHSA-5mj8-gf6m-fhw8: 9Router has an Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header","summary":"9Router has an authentication bypass vulnerability where attackers can fake being a local client by adding a spoofed X-9r-Real-Ip header (a custom HTTP header that tells the server where a request came from). The app trusts this header to decide whether to require an API key, but when deployed without its protective wrapper layer, attackers can send X-9r-Real-Ip: 127.0.0.1 to bypass authentication and gain unauthorized access to the LLM API and the owner's provider resources.","solution":"The source recommends four mitigations: (1) Do not trust X-9r-Real-Ip or any X-9r-* header when received directly from clients. (2) Derive the client address for authorization from a trusted transport-level source, such as req.socket.remoteAddress, rather than a request header. (3) If custom-server.js is required for the security model, fail closed when its trusted marker is absent, and explicitly strip/reject any inbound client-supplied X-9r-* headers at the edge. (4) Document supported, secure startup modes so the application is not run in a configuration where the header is attacker-controllable.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-5mj8-gf6m-fhw8","publishedAt":"2026-09-22T16:34:06.000Z","cveId":"CVE-2026-56681","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":[],"issueType":"vulnerability","affectedPackages":["9router@<= 0.5.4 (fixed: 0.5.8)"],"affectedVendors":[],"affectedVendorsRaw":["9Router"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-09-22T16:34:06.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}