Executive brief
9Router, an AI model routing dashboard, contains a critical security flaw where several management interfaces are completely unprotected. An unauthorized person can access the system over the internet to steal sensitive AI provider API keys, view private conversation histories between users and AI models, or shut down the service entirely. This could lead to the theft of expensive AI resources or the exposure of confidential business data contained in AI prompts.
Technical details
The vulnerability stems from missing authentication middleware in several Next.js API routes, specifically under /api/providers/* and /api/usage/*. A remote, unauthenticated attacker can perform CRUD operations on provider connections, allowing them to inject malicious providers to intercept traffic or delete existing ones to cause a denial of service. Additionally, the /api/usage/stats endpoint leaks full plaintext API keys (e.g., OpenAI, Anthropic), and /api/usage/request-details exposes complete conversation logs including system prompts and assistant responses. As of the advisory date, no patched version has been released.
Affected products
- decolua 9Router <= 0.4.41
Timeline
- 2026-06-13: advisory: Initial GitHub Security Advisory published by vendor
- 2026-07-13: disclosed: CVE published and NVD record created