{"schema":"threatline.record/2","record":{"id":"CVE-2026-108593","aliases":[],"summary":"9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint","details":"9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and newlines to add hooks_auto_accept and a hooks.post_llm_call shell command, which Hermes Agent executes without approval after an LLM call.","categories":["Unclassified"],"product":"9router","vendor":"decolua","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-108593","source_modified_at":"2026-10-13T11:38:18.277Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"9router","vendor":"decolua","versions":[{"version":"0.4.1","lessThanOrEqual":"0.5.99","status":"affected","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":7.3,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00268,"percentile":0.17929,"score_date":"2026-10-23"},"published_at":"2026-10-10T18:16:57.203Z","modified_at":"2026-10-13T11:38:18.277Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-108593","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-13T11:38:18.277Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-108593","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://hackmd.io/@haind/9router-hermes-config-injection","tags":["exploit"]},{"source":"CVE List","url":"https://github.com/decolua/9router/blob/a99cf57239ff778b61e434c2786009d5ed1c412c/src/app/api/cli-tools/hermes-settings/route.js#L20-L35","tags":["technical-description"]},{"source":"CVE List","url":"https://github.com/decolua/9router/blob/a99cf57239ff778b61e434c2786009d5ed1c412c/src/app/api/cli-tools/hermes-settings/route.js#L185-L223","tags":["technical-description"]},{"source":"CVE List","url":"https://github.com/decolua/9router","tags":["product"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/9router-0.4.1-through-0.5.99-config-injection-rce-via-hermes-settings-endpoint","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-10-13T11:37:50.670875Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-13T11:38:18.277Z","content_hash":"4b41046665d948b4da422de357df09b248fc902711c65638c62221f393fc8212"}}