Executive brief
9Router, an AI model routing dashboard, contains a critical security flaw where several administrative interfaces are accessible without a password. An attacker can remotely access the system to steal plaintext API keys for AI providers (like OpenAI), view private conversation histories between users and AI models, and modify or delete service connections. This could lead to significant financial loss through billing fraud, the theft of sensitive corporate data contained in AI prompts, and a total shutdown of AI-dependent services.
Technical details
9Router suffers from missing authentication middleware across several Next.js API routes, specifically under the /api/providers/* and /api/usage/* paths. A remote, unauthenticated attacker can send simple GET requests to /api/usage/stats to retrieve plaintext API keys for all configured AI providers, or to /api/usage/request-details/:id to view full conversation turns including system prompts and user messages. Furthermore, the /api/providers endpoint lacks authorization for POST, PUT, and DELETE methods, allowing attackers to hijack traffic by injecting malicious provider proxies or delete existing configurations to cause a denial of service. As of the advisory date, no official patch has been released, though developers are advised to implement authentication middleware and mask sensitive credentials in API responses.
Affected products
- decolua 9Router <= 0.4.41
Timeline
- 2026-06-13: advisory: Vendor advisory GHSA-vjc7-jrh9-9j86 published
- 2026-07-13: disclosed: CVE-2026-62327 published to NVD