CVE-2026-108593— 9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint
Quick assessment
Affected
decolua 9router
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
9router 0.4.1 至 0.5.99 版本在 POST /api/cli-tools/hermes-settings 端点中存在配置注入漏洞，允许经过身份认证的仪表板用户在 Hermes Agent 的 config.yaml 文件中注入任意配置项。攻击者可以提交包含双引号和换行符的 baseUrl 值，从而添加 hooks_auto_accept 配置项以及 hooks.post_llm_call shell 命令。该 shell 命令会在大语言模型（LLM）调用后未经人工审批直接被 Hermes Age
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-108593
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and newlines to add hooks_auto_accept and a hooks.post_llm_call shell command, which Hermes Agent executes without approval after an LLM call.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-108593
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-108593
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-108593 (1)
Vendor Advisories for CVE-2026-108593 (1)
Security Blog Posts for CVE-2026-108593 (1)
Other References for CVE-2026-108593 (1)
IV. Related Vulnerabilities
Same product: 9router
-
CVE-2026-103530
decolua 9Router Search Endpoint ssrfGuard.js fetch server-si -
CVE-2026-56682
9Router: Login Brute-Force Lockout Bypass via Spoofable X-9r -
CVE-2026-56681
9Router: Authentication Bypass in Public LLM API via Spoofab -
CVE-2026-72860
9router Server-Side Request Forgery via /api/provider-nodes/ -
CVE-2026-56677
9Router: Authenticated Server-Side Request Forgery (SSRF) vi
Same vendor: decolua
-
CVE-2026-103530
decolua 9Router Search Endpoint ssrfGuard.js fetch server-si -
CVE-2026-56682
9Router: Login Brute-Force Lockout Bypass via Spoofable X-9r -
CVE-2026-56681
9Router: Authentication Bypass in Public LLM API via Spoofab -
CVE-2026-72860
9router Server-Side Request Forgery via /api/provider-nodes/ -
CVE-2026-56677
9Router: Authenticated Server-Side Request Forgery (SSRF) vi
Same weakness: CWE-94
-
CVE-2026-62098
WordPress Boutique theme <= 2.3.3 - Arbitrary Shortcode Exec -
CVE-2026-42696
WordPress SiteVault – Backup, Restore, Migration & Cloning p -
CVE-2026-39802
WordPress Everest Backup plugin <= 2.3.13 - Remote Code Exec -
CVE-2026-108598
Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Tem -
CVE-2026-103071
WordPress Thank You Page Customizer for WooCommerce plugin <
V. Comments for CVE-2026-108593
No comments yet