CVE-2026-59800: 9Router OS command injection through unauthenticated Tailscale install endpoint

Summary

9Router before 0.4.44 has an OS command injection flaw in the unauthenticated POST /api/tunnel/tailscale-install endpoint, which the dashboard middleware matcher does not cover, so no authorization check applies. The sudoPassword field from the request body is written to the stdin of a 'sudo -S sh' child process; when sudo does not prompt for a password (the process runs as root, NOPASSWD is configured, or a recent sudo timestamp cache exists), sh executes the value as a shell command, letting a remote unauthenticated attacker run arbitrary OS commands. The Shadowserver Foundation first observed exploitation on 2026-07-04 (UTC).

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• LowFBI arrests Saudi OpenAI employee who allegedly planted recording device in conference roomSimilar attack · CNBC Technology
• MediumVisual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)Similar attack · Embrace The Red
• LowAnthropic warns self-replicating AI could spread to your smart devicesSimilar attack · BleepingComputer
• InfoAnthropic Warns Small AI Models Could Soon Form Self-Propagating IoT BotnetsSimilar attack · The Hacker News
• InfoAgent Baseline Publishes Security Reference Architecture for Software FactoriesSimilar attack · Socket Blog