CVE-2025-67091

MEDIUM EPSS 85.6%
Published Jan 8, 20265mo ago · Modified Jun 17, 20261w ago
6.5 CVSS 3.1
Medium
Find Similar
Published Jan 8, 2026 5mo ago
Last Modified Jun 17, 2026 1w ago

Description

An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6.4 & 4.6.8 in the GL.iNet custom opkg wrapper script located at /usr/libexec/opkg-call. The script is executed with root privileges when triggered via the LuCI web interface or authenticated API calls to manage packages. The vulnerable code uses shell redirection to create a lock file in the world-writable /tmp directory.

CVSS Details

Base Score
6.5
Exploitability
2.8
Impact
3.6
Vector string
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector Adjacent
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
85.6% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-307

Affected Products 4

VendorProductVersionRange
gl-inetax1800_firmware4.2.0any
gl-inetax1800_firmware4.6.4any
gl-inetax1800_firmware4.6.8any
gl-inetax1800*any

References 3

  • aleksazatezalo.medium.com https://aleksazatezalo.medium.com/critical-authentication-bypass-vulnerability-in-gl-inet-gl-axt1800-router-firmware-f19442ca721d
    ExploitPress/Media CoverageThird Party Advisory
  • aleksazatezalo.medium.com https://aleksazatezalo.medium.com/critical-command-injection-vulnerability-in-gl-inet-gl-axt1800-router-firmware-e6d67d81ee51?postPublishedType=repub
    ExploitPress/Media CoverageThird Party Advisory
  • gl-inet.com https://www.gl-inet.com/
    Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.