CVE-2026-62312 decolua CVE debrief

Who should care

Users of 9Router AI router & token saver, especially those with remote authenticated access, should be aware of this vulnerability. Administrators and security teams responsible for software management and vulnerability mitigation should prioritize patching to version 0.5.2.

Technical summary

The vulnerability in 9Router AI router & token saver allows remote authenticated attackers to execute arbitrary code on the host operating system. This is achieved through a combination of a Host header bypass of localhost-only routes and unvalidated MCP plugin arguments passed to child_process.spawn(). Malicious custom plugins can exploit this vulnerability to execute commands via /api/mcp//sse. The issue is addressed in version 0.5.2.

Defensive priority

High

Recommended defensive actions

• Patch 9Router to version 0.5.2 or later
• Restrict access to /api/mcp//sse
• Monitor for suspicious MCP plugin activity
• Implement additional authentication and authorization checks for custom plugins
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record was published on 2026-07-15T21:16:55.810Z and was last modified on 2026-07-16T19:16:51.010Z. The NVD entry is currently Deferred. Limited information is available about the specific details of the vulnerability and its exploitation.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.