CVE-2026-62312

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-62312", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-07-13T19:27:58.314Z", "datePublished": "2026-07-15T20:53:18.302Z", "dateUpdated": "2026-07-16T18:51:28.371Z"}, "containers": {"cna": {"title": "9Router: Authenticated RCE via Unvalidated MCP Plugin Arguments", "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "lang": "en", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp"}, {"name": "https://github.com/decolua/9router/commit/da667836cc7584bea0edd893de1d590c9ea279dc", "tags": ["x_refsource_MISC"], "url": "https://github.com/decolua/9router/commit/da667836cc7584bea0edd893de1d590c9ea279dc"}, {"name": "https://github.com/decolua/9router/releases/tag/v0.5.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/decolua/9router/releases/tag/v0.5.2"}], "affected": [{"vendor": "decolua", "product": "9router", "versions": [{"version": "< 0.5.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-15T20:53:18.302Z"}, "descriptions": [{"lang": "en", "value": "9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin args passed to child_process.spawn(), allowing malicious custom plugins to execute commands through /api/mcp//sse. This issue is fixed in version 0.5.2."}], "source": {"advisory": "GHSA-63p9-g54h-prrp", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-16T18:51:17.611560Z", "id": "CVE-2026-62312", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-16T18:51:28.371Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-62312", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-16T18:51:17.611560Z"}}}], "references": [{"url": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-16T18:51:00.519Z"}}], "cna": {"title": "9Router: Authenticated RCE via Unvalidated MCP Plugin Arguments", "source": {"advisory": "GHSA-63p9-g54h-prrp", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "decolua", "product": "9router", "versions": [{"status": "affected", "version": "< 0.5.2"}]}], "references": [{"url": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp", "name": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/decolua/9router/commit/da667836cc7584bea0edd893de1d590c9ea279dc", "name": "https://github.com/decolua/9router/commit/da667836cc7584bea0edd893de1d590c9ea279dc", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/decolua/9router/releases/tag/v0.5.2", "name": "https://github.com/decolua/9router/releases/tag/v0.5.2", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin args passed to child_process.spawn(), allowing malicious custom plugins to execute commands through /api/mcp//sse. This issue is fixed in version 0.5.2."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-15T20:53:18.302Z"}}}, "cveMetadata": {"cveId": "CVE-2026-62312", "state": "PUBLISHED", "dateUpdated": "2026-07-16T18:51:28.371Z", "dateReserved": "2026-07-13T19:27:58.314Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-15T20:53:18.302Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "9router", "vendor": "decolua", "versions": [{"status": "affected", "version": "< 0.5.2"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary code execution on the host operating system by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin args passed to child_process.spawn(), allowing malicious custom plugins to execute commands through /api/mcp//sse. This issue is fixed in version 0.5.2."}, {"lang": "es", "value": "9Router es un router de IA y ahorrador de tokens. Antes de la versi\u00f3n 0.5.2, 9Router permite a un atacante remoto autenticado lograr la ejecuci\u00f3n de c\u00f3digo arbitrario en el sistema operativo anfitri\u00f3n al combinar un bypass del encabezado Host de rutas solo de localhost con argumentos de plugin MCP no validados pasados a child_process.spawn(), permitiendo que plugins personalizados maliciosos ejecuten comandos a trav\u00e9s de /api/mcp//sse. Este problema est\u00e1 solucionado en la versi\u00f3n 0.5.2."}], "id": "CVE-2026-62312", "lastModified": "2026-10-24T21:10:00.130", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-62312", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-07-16T18:51:17.611560Z", "version": "2.0.3"}}]}, "published": "2026-07-15T21:16:55.810", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/decolua/9router/commit/da667836cc7584bea0edd893de1d590c9ea279dc"}, {"source": "security-advisories@github.com", "url": "https://github.com/decolua/9router/releases/tag/v0.5.2"}, {"source": "security-advisories@github.com", "url": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/decolua/9router/security/advisories/GHSA-63p9-g54h-prrp"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.5.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "9router", "source": "cna", "vendor": "decolua"}, "product": "9router", "vendor": "decolua"}], "created": "2026-07-15T23:30:04.386962+00:00", "updated": "2026-07-31T02:45:04.368774+00:00", "vendors": ["decolua", "decolua$PRODUCT$9router"]}