PT-2026-109733 · Decolua · 9Router
CVSS v3.1
6.4
Medium
| Vector | AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H |
9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and newlines to add hooks auto accept and a hooks.post llm call shell command, which Hermes Agent executes without approval after an LLM call.
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
9Router