CVE-2026-62312

Name of the Vulnerable Software and Affected Versions 9Router versions prior to 0.5.2

Description A remote authenticated attacker can achieve arbitrary code execution on the host operating system. This is possible by combining a Host header bypass of localhost-only routes with unvalidated MCP plugin arguments passed to the child process.spawn() function, which allows malicious custom plugins to execute commands through the '/api/mcp//sse' endpoint.

Recommendations Update to version 0.5.2.