Vulnerability Description
9Router is an AI router & token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and settings) and full database import (complete overwrite) without any authentication requirement beyond the ALWAYS_PROTECTED middleware check, which only validates JWT or CLI token. This issue is fixed in version 0.4.80.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/decolua/9router/commit/0c7c9de00ae3ab81d6580e3cc368483c4c03f6
- https://github.com/decolua/9router/releases/tag/v0.4.80
- https://github.com/decolua/9router/security/advisories/GHSA-qvfm-67h2-2qfx
- https://github.com/decolua/9router/security/advisories/GHSA-qvfm-67h2-2qfx
FAQ
What is CVE-2026-55500?
CVE-2026-55500 is a vulnerability with a CVSS score of 9.9 (CRITICAL). 9Router is an AI router & token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and settings) and full data...
How severe is CVE-2026-55500?
CVE-2026-55500 has been rated CRITICAL with a CVSS base score of 9.9/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-55500?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.