CVE-2026-108593: Decolua 9router

Medium severity, CVSS 6.4.

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and newlines to add hooks_auto_accept and a hooks.post_llm_call shell command, which Hermes Agent executes without approval after an LLM call.

Affected products

• Decolua 9router: from 0.4.1, up to and including 0.5.99

Published 2026-10-10. Last modified 2026-10-10.