CriticalVulnerabilityLLM-specific
GHSA-vjc7-jrh9-9j86: 9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats
- Identifier
- GHSA-vjc7-jrh9-9j86
- Published
- Record updated
- Affected
- 9router <= 0.4.41
- Fixed in
- No fixed version was stated when the source was last read.
Summary
9Router, in versions up to and including 0.4.41, exposes its Next.js dashboard API without authentication. The /api/providers endpoints let anyone list, read, create, modify and delete provider connections, while /api/usage/stats returns full plaintext API keys. The /api/usage/request-logs and /api/usage/request-details endpoints also expose other users' request history and full conversation contents, including system prompts and messages.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumAI coding agents expose developer screenshots on GitHub reposSimilar attack · ReversingLabs Blog
- MediumOver 1,500 npm packages exposed by Trusted Publishing validation flawSimilar attack · CSO Online
- MediumCVE-2026-108958: TensorLayer HDF5 model loading deserialization via model_config argumentSimilar attack · NVD/CVE Database
- InfoWhat Does It Mean to Sandbox an AI Coding Agent? | Endor LabsSimilar attack · Endor Labs Blog
- InfoLLM Development Risks: Security Threats and Mitigation Strategies | Endor LabsSimilar attack · Endor Labs Blog