CVE Explorer
CVE-2026-49353
9Router is an AI router & token saver. In 0.4.45 and earlier, 9Router's src/dashboardGuard.js local-only access gate used Host and Origin headers in isLocalRequest() to protect /api/mcp/*, /api/tunnel/*, and /api/cli-tools/*, allowing header spoofing in reverse proxy or tunnel deployments to reach MCP child process stdin paths.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"product":"9router","vendor":"decolua","versions":[{"status":"affected","version":"<= 0.4.45"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:6f1b987a8bc6bb6b100c92200d47977e6093290c2c817481f435fd877708eeba · sha256:f8a1b1456af74e7a… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:6f1b987a8bc6bb6b100c92200d47977e6093290c2c817481f435fd877708eeba · sha256:f8a1b1456af74e7a… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-290","description":"CWE-290: Authentication Bypass by Spoofing","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:6f1b987a8bc6bb6b100c92200d47977e6093290c2c817481f435fd877708eeba · sha256:f8a1b1456af74e7a… · /containers/cna/problemTypes/0/descriptions/0
Source references
5 source assertions{"name":"https://github.com/decolua/9router/commit/5e1c1261368e06dced1cbc650684561b2c8844db","tags":["x_refsource_MISC"],"url":"https://github.com/decolua/9router/commit/5e1c1261368e06dced1cbc650684561b2c8844db"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:6f1b987a8bc6bb6b100c92200d47977e6093290c2c817481f435fd877708eeba · sha256:f8a1b1456af74e7a… · /containers/cna/references/1
{"name":"https://github.com/decolua/9router/commit/bb86808582067e4fc6f004508a919efb9970d1d5","tags":["x_refsource_MISC"],"url":"https://github.com/decolua/9router/commit/bb86808582067e4fc6f004508a919efb9970d1d5"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:6f1b987a8bc6bb6b100c92200d47977e6093290c2c817481f435fd877708eeba · sha256:f8a1b1456af74e7a… · /containers/cna/references/2
{"name":"https://github.com/decolua/9router/releases/tag/v0.4.46","tags":["x_refsource_MISC"],"url":"https://github.com/decolua/9router/releases/tag/v0.4.46"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:6f1b987a8bc6bb6b100c92200d47977e6093290c2c817481f435fd877708eeba · sha256:f8a1b1456af74e7a… · /containers/cna/references/3
{"name":"https://github.com/decolua/9router/security/advisories/GHSA-6g2f-w7g3-77vf","tags":["x_refsource_CONFIRM"],"url":"https://github.com/decolua/9router/security/advisories/GHSA-6g2f-w7g3-77vf"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:6f1b987a8bc6bb6b100c92200d47977e6093290c2c817481f435fd877708eeba · sha256:f8a1b1456af74e7a… · /containers/cna/references/0
{"tags":["exploit"],"url":"https://github.com/decolua/9router/security/advisories/GHSA-6g2f-w7g3-77vf"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:6f1b987a8bc6bb6b100c92200d47977e6093290c2c817481f435fd877708eeba · sha256:f8a1b1456af74e7a… · /containers/adp/0/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.