Is CVE-2026-103530 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-103530 being exploited in the wild.

How severe is CVE-2026-103530?

High severity, with a CVSS score of 7.3, published 1 October 2026.

How is CVE-2026-103530 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-103530?

Check whether you run Decolua 9Router at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-103530: decolua 9Router server-side request forgery in search endpoint

CVE-2026-103530 · Severity: high · CVSS 7.3 · Published 2026-10-01

9Router is an AI provider routing service that allows users to redirect API calls to multiple AI backends. A vulnerability in its search endpoint allows remote attackers to manipulate which URL the server contacts, enabling them to access internal networks, steal API credentials, and bypass authentication controls. An attacker could extract upstream provider API keys, probe internal services, or gain unauthorized access to local functionality.

Vendors: Decolua.

Quick answers

Is CVE-2026-103530 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-103530 being exploited in the wild.
How severe is CVE-2026-103530?: High severity, with a CVSS score of 7.3, published 1 October 2026.
Which products and versions are affected?: Decolua 9Router up to 0.5.55.
Is there a fix for CVE-2026-103530?: No fixed version is recorded yet. Disable or restrict the provider_options.baseUrl override feature to administrators only, or implement strict DNS-based IP validation (resolving domains to IPs and blocking private/loopback ranges), disable automatic redirect following in fetch requests, and remove the automatic isLocalRequest trust for loopback connections.</anigation> <parameter name="timeline">[{"kind":"disclosed","at":"2026-09-02","note":"Issue #3714 reported on GitHub with technical details and multiple bypass techniques"},{"kind":"advisory","at":"2026-10-01","note":"CVE-2026-103530 published"}] If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-103530 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-103530?: Check whether you run Decolua 9Router at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Disable or restrict the provider_options.baseUrl override feature to administrators only, or implement strict DNS-based IP validation (resolving domains to IPs and blocking private/loopback ranges), disable automatic redirect following in fetch requests, and remove the automatic isLocalRequest trust for loopback connections.</anigation> <parameter name="timeline">[{"kind":"disclosed","at":"2026-09-02","note":"Issue #3714 reported on GitHub with technical details and multiple bypass techniques"},{"kind":"advisory","at":"2026-10-01","note":"CVE-2026-103530 published"}]

Technical details

The /v1/search endpoint accepts user-supplied baseUrl overrides in provider_options that are passed directly to fetch() requests. Although an SSRF guard exists in ssrfGuard.js, it contains multiple bypasses: domain-based checks do not validate DNS resolution (allowing nip.io and similar wildcard domains), IPv6-mapped IPv4 addresses bypass validation regexes, trailing dots circumvent hostname matching, and redirect chains are followed without re-validation. Additionally, loopback requests are automatically tagged with isLocalRequest=true, granting unauthenticated access to protected local endpoints.

Affected products

decolua 9Router up to 0.5.55

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.