PT-2026-38545 · Router For Me · Cliproxyapi

M3X1 · Published 2026-05-07 · Updated 2026-05-07 · CVE-2026-8081

Mitre

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29. Affected by this issue is some unknown functionality of the file internal/api/handlers/management/api tools.go of the component API Interface. The manipulation of the argument url leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-8081

Affected Products

Cliproxyapi

References · 5

• 🔥 https://github.com/m3ngx1ng/cve/blob/main/CLIProxyAPI-SSRF.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8081 · Security Note
• https://vuldb.com/submit/807811 · Note
• https://vuldb.com/vuln/361836 · Note
• https://vuldb.com/vuln/361836/cti · Note