Vulnerability · Published Oct 10, 2026 · Assigned by VulnCheck

CVE-2026-1085939router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint

Medium 6.4

In plain English

A medium-severity code injection in 9router from decolua. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).

Severity (CVSS 3.1)6.4Medium

Exploit odds (30 days)0.3%top 81.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and newlines to add hooks_auto_accept and a hooks.post_llm_call shell command, which Hermes Agent executes without approval after an LLM call.

Affected products (as reported)

Vendor	Product	Versions
decolua	9router	0.4.1 – through 0.5.99

Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

References

https://hackmd.io/@haind/9router-hermes-config-injection third-party-advisory
https://github.com/decolua/9router/blob/a99cf57239ff778b61e434c2786009d5ed1c412c/src/app/api/cli-tools/hermes-settings/route.js#L20-L35 technical-description
https://github.com/decolua/9router/blob/a99cf57239ff778b61e434c2786009d5ed1c412c/src/app/api/cli-tools/hermes-settings/route.js#L185-L223 technical-description
https://github.com/decolua/9router product
VulnCheck Advisory: 9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint third-party-advisory