CVE-2026-56676

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-56676", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-22T16:39:01.044Z", "datePublished": "2026-07-10T15:30:49.514Z", "dateUpdated": "2026-07-13T18:11:54.297Z"}, "containers": {"cna": {"title": "9router: Image prefetch DNS rebinding allows SSRF to internal services", "problemTypes": [{"descriptions": [{"cweId": "CWE-367", "lang": "en", "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx"}, {"name": "https://github.com/decolua/9router/commit/c7d07448c58bec1200741de0b73305b860416b82", "tags": ["x_refsource_MISC"], "url": "https://github.com/decolua/9router/commit/c7d07448c58bec1200741de0b73305b860416b82"}, {"name": "https://github.com/decolua/9router/releases/tag/v0.5.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/decolua/9router/releases/tag/v0.5.2"}], "affected": [{"vendor": "decolua", "product": "9router", "versions": [{"version": "< 0.5.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-10T15:30:49.514Z"}, "descriptions": [{"lang": "en", "value": "9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, but open-sse/translator/concerns/image.js performs the later server-side image fetch with a separate DNS resolution. An authenticated attacker with access to the LLM proxy can use a vision-capable model and an attacker-controlled DNS name that first resolves to a public IP and then rebinds to an internal address, allowing server-side requests to internal-only HTTP services. This issue is fixed in version 0.5.2."}], "source": {"advisory": "GHSA-cmhj-wh2f-9cgx", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-13T18:11:05.854652Z", "id": "CVE-2026-56676", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-13T18:11:54.297Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-56676", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-13T18:11:05.854652Z"}}}], "references": [{"url": "https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-13T18:10:48.814Z"}}], "cna": {"title": "9router: Image prefetch DNS rebinding allows SSRF to internal services", "source": {"advisory": "GHSA-cmhj-wh2f-9cgx", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "decolua", "product": "9router", "versions": [{"status": "affected", "version": "< 0.5.2"}]}], "references": [{"url": "https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx", "name": "https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/decolua/9router/commit/c7d07448c58bec1200741de0b73305b860416b82", "name": "https://github.com/decolua/9router/commit/c7d07448c58bec1200741de0b73305b860416b82", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/decolua/9router/releases/tag/v0.5.2", "name": "https://github.com/decolua/9router/releases/tag/v0.5.2", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, but open-sse/translator/concerns/image.js performs the later server-side image fetch with a separate DNS resolution. An authenticated attacker with access to the LLM proxy can use a vision-capable model and an attacker-controlled DNS name that first resolves to a public IP and then rebinds to an internal address, allowing server-side requests to internal-only HTTP services. This issue is fixed in version 0.5.2."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-367", "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918: Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-10T15:30:49.514Z"}}}, "cveMetadata": {"cveId": "CVE-2026-56676", "state": "PUBLISHED", "dateUpdated": "2026-07-13T18:11:54.297Z", "dateReserved": "2026-06-22T16:39:01.044Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-10T15:30:49.514Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "9router", "vendor": "decolua", "versions": [{"status": "affected", "version": "< 0.5.2"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, but open-sse/translator/concerns/image.js performs the later server-side image fetch with a separate DNS resolution. An authenticated attacker with access to the LLM proxy can use a vision-capable model and an attacker-controlled DNS name that first resolves to a public IP and then rebinds to an internal address, allowing server-side requests to internal-only HTTP services. This issue is fixed in version 0.5.2."}, {"lang": "es", "value": "9Router es un router de IA y un ahorrador de tokens. Antes de la versi\u00f3n 0.5.2, 9router valida las URL de las im\u00e1genes resolviendo el host antes de la obtenci\u00f3n, pero open-sse/translator/concerns/image.js realiza la posterior obtenci\u00f3n de im\u00e1genes del lado del servidor con una resoluci\u00f3n DNS separada. Un atacante autenticado con acceso al proxy LLM puede usar un modelo con capacidad de visi\u00f3n y un nombre DNS controlado por el atacante que primero se resuelve en una IP p\u00fablica y luego se reasigna a una direcci\u00f3n interna, permitiendo solicitudes del lado del servidor a servicios HTTP solo internos. Este problema se solucion\u00f3 en la versi\u00f3n 0.5.2."}], "id": "CVE-2026-56676", "lastModified": "2026-10-25T15:10:00.147", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 3.7, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-56676", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-13T18:11:05.854652Z", "version": "2.0.3"}}]}, "published": "2026-07-10T16:16:34.923", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/decolua/9router/commit/c7d07448c58bec1200741de0b73305b860416b82"}, {"source": "security-advisories@github.com", "url": "https://github.com/decolua/9router/releases/tag/v0.5.2"}, {"source": "security-advisories@github.com", "url": "https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/decolua/9router/security/advisories/GHSA-cmhj-wh2f-9cgx"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-367"}, {"lang": "en", "value": "CWE-918"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.5.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "9router", "source": "cna", "vendor": "decolua"}, "product": "9router", "vendor": "decolua"}], "created": "2026-07-10T17:00:12.163484+00:00", "updated": "2026-08-03T04:15:03.742692+00:00", "vendors": ["decolua", "decolua$PRODUCT$9router"]}