{"data":{"id":"828a3b5a-268c-4aa9-8c2a-efe1d84e262e","title":"GHSA-8gmq-j984-vp4r: 9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass","summary":"9router exposes an OpenAI/Anthropic-compatible LLM proxy that is meant to require an API key through Next.js middleware. The middleware checks the original request path before a rewrite maps `/codex/*` to `/api/v1/responses`, and `/codex` is missing from the protected prefix list, so requests to `/codex/*` skip the key check. Tested on v0.4.80 (commit 23da7b1fe3bb8edd2bdbdb63fbbb15a476b02c56, Next.js 16.2.9), an unauthenticated remote request to `/codex/x` returned 200 OK where `/api/v1/responses` returned 401, letting attackers trigger upstream provider calls with operator-stored credentials.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-8gmq-j984-vp4r","publishedAt":"2026-08-28T18:32:01.000Z","cveId":"CVE-2026-55638","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["9router@< 0.5.2 (fixed: 0.5.2)"],"affectedPackageNames":["9router"],"affectedPackageRefs":["npm:9router"],"affectedVendors":[],"affectedVendorsRaw":["9router"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.06581,"epssCheckedAt":"2026-11-04T12:08:33.690Z","kevDateAdded":null,"advisoryAliases":["GHSA-8gmq-j984-vp4r"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-08-28T18:32:01.000Z","fixReleasedAt":"2026-06-17T04:58:44.436Z","daysToFix":-72,"fixCheckedAt":"2026-10-29T21:31:07.567Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"9router","fixedVersion":"0.5.2","matchedVersion":"0.5.2","fixReleasedAt":"2026-06-17T04:58:44.436Z","daysToFix":-72,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:31:07.421Z"}]}}