Skip to content
Threat Feed
Subscribe

Product

9router (< 0.5.2)

1 brief RSS
high advisory

9router Authentication Bypass and SSRF via Host Header Spoofing

An authentication bypass in 9router 0.4.80 and earlier allows remote attackers to spoof the 'Host' header, gaining unauthorized access to API proxy endpoints, enabling quota theft via AI relay and server-side request forgery (SSRF).

9router +1 authentication-bypass ssrf api-security web-vulnerability authorization-bypass llm-proxy
2r 2t 1c