9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats

Published Jul 6, 2026 CVSS 10.0

title: Unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats product: 9Router version:

API Abuse

github copilot copilot openai

Get the weekly digest. Every Monday: top AI security stories of the week. Free.