Skip to content
Threat Feed
Subscribe

Product

9router-App (<= 0.5.4)

1 brief RSS
high advisory

Authentication Bypass in 9router Public LLM API

9router is vulnerable to an authentication bypass via a spoofable X-9r-Real-Ip HTTP header, allowing unauthenticated attackers to access LLM API endpoints.

9router-app web-application auth-bypass
1r 1t 1c