THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-56677 (HIGH 8.6) — 9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint in src/app/api/auth/oidc/test/route.js passes the user-controlled issuerUrl parameter to fetchOidcDiscovery() in src/lib/auth/oidc.js without restricting private or loopback destina

[NVD] CVE-2026-56677 (HIGH 8.6) — 9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint in src/app/api/auth/oidc/test/route.js passes the user-controlled issuerUrl parameter to fetchOidcDiscovery() in src/lib/auth/oidc.js without restricting private or loopback destina

mednvdPublished 2026-08-17

CVE-2026-56677 CVSS: 8.6 HIGH Published: 2026-08-17T22:17:14.970

9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint in src/app/api/auth/oidc/test/route.js passes the user-controlled issuerUrl parameter to fetchOidcDiscovery() in src/lib/auth/oidc.js without restricting private or loopback destinations, allowing unauthenticated attackers when dashboa

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-56677