Is CVE-2026-63732 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-63732 being exploited in the wild.

How severe is CVE-2026-63732?

Critical severity, with a CVSS score of 9.9, published 23 July 2026.

Is there a fix for CVE-2026-63732?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-63732 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-63732?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-63732: decolua 9router remote code execution via vulnerability chain

CVE-2026-63732 · Severity: critical · CVSS 9.9 · Published 2026-07-23

9router, a tool for managing AI model traffic and plugins, contains a critical security flaw that allows unauthorized remote access. By using a known default password and tricking the system into thinking a request is coming from the local machine, an attacker can take full control of the server. This could lead to the theft of sensitive AI API keys, interception of private data, and complete compromise of the underlying host system.

Quick answers

Is CVE-2026-63732 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-63732 being exploited in the wild.
How severe is CVE-2026-63732?: Critical severity, with a CVSS score of 9.9, published 23 July 2026.
Which products and versions are affected?: decolua 9router < 0.4.60.
Is there a fix for CVE-2026-63732?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-63732 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-63732?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability chain in 9router < 0.4.60 allows for remote code execution. First, fresh installations use a hardcoded default password ('123456') in the login route. Second, the 'isLocalRequest' middleware incorrectly trusts the client-supplied Host header to verify local-only access, allowing remote attackers to reach restricted routes like /api/cli-tools/cowork-settings by spoofing 'Host: localhost'. Third, the MCP plugin registration fails to validate arguments passed to child_process.spawn(). An attacker can register a malicious plugin using the 'node' command with '-e' arguments and trigger execution via the plugin's SSE endpoint. This results in arbitrary OS command execution as the process user (often root in Docker environments).

Affected products

decolua 9router < 0.4.60

Timeline

2026-07-03: advisory: Vendor advisory GHSA-4922-8r65-fq26 published
2026-07-23: disclosed: CVE-2026-63732 published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.