CVE-2026-56678
CVE-2026-56678 · 9Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
9Router is an AI router & token saver. Prior to 0.5.6, the Kiro API-key validation endpoint POST /api/oauth/kiro/api-key builds an upstream URL using a user-controlled region value, allowing an authenticated attacker to supply a crafted region such as kiro-canary.local:8443# and cause 9Router to send the Kiro validation request to an attacker-controlled host while forwarding the submitted Kiro API key as an Authorization header. This issue is fixed in version 0.5.6.
CVSS 6.4 · Media · EPSS 0,2% · Código de explotación público · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: node