CVE-2026-56677
9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint in src/app/api/auth/oidc/test/route.js passes the user-controlled issuerUrl parameter to fetchOidcDiscovery() in src/lib/auth/oidc.js without restricting private or loopback destinations, allowing unauthenticated attackers when dashboard login is disabled to scan internal services and reflect OIDC discovery fields including token_endpoint and jwks_uri.
- Affected products
- 9Router
- Fix
- Available
- CVSS 3.1
- 8.6 HIGH
- EPSS
- 0.3% (19th percentile)
- Weakness
- CWE-306, CWE-918
- NVD status
- Received
- Published
- 2026-08-17
CVE-2026-56677 at NVD
No indexed exploits for CVE-2026-56677 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-56677 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.