p PatchFirst

CVE-2026-46339

CVE-2026-46339 · 9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

This page contains facts from public vulnerability sources. Check the original advisory before updating.

9Router is an AI router & token saver. From 0.4.30 until 0.4.37, 9Router's src/proxy.js middleware did not protect /api/cli-tools/* and /api/mcp/*, allowing unauthenticated registration of customPlugins through src/app/api/cli-tools/cowork-settings/route.js and command execution through the MCP bridge. This vulnerability is fixed in 0.4.37.

CVSS 10.0 · Critical · EPSS 2.8% · Public exploit · Fix available

Published
Updated

Stack: node

Affected products and versions

  • 9router

    Versions
    • >= 0.4.30, < 0.4.37: Affected

    No fix published

  • 9router npm

    Affected ranges
    • SEMVER: ≥ 0.4.30, < 0.4.37

    Update to 0.4.37

Original sources

Check your server →