CVE-2025-67091

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-67091
An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6.4 & 4.6.8 in the GL.iNet custom opkg wrapper script located at /usr/libexec/opkg-call. The script is executed with root privileges when triggered via the LuCI web interface or authenticated API calls to manage packages. The vulnerable code uses shell redirection to create a lock file in the world-writable /tmp directory.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://aleksazatezalo.medium.com/critical-authentication-bypass-vulnerability-in-gl-inet-gl-axt1800-router-firmware-f19442ca721d Exploit Third Party Advisory Press/Media Coverage
https://aleksazatezalo.medium.com/critical-command-injection-vulnerability-in-gl-inet-gl-axt1800-router-firmware-e6d67d81ee51?postPublishedType=repub Exploit Third Party Advisory Press/Media Coverage
https://www.gl-inet.com/ Product
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:gl-inet:ax1800_firmware:4.2.0:*:*:*:*:*:*:*
cpe:2.3:o:gl-inet:ax1800_firmware:4.6.4:*:*:*:*:*:*:*
cpe:2.3:o:gl-inet:ax1800_firmware:4.6.8:*:*:*:*:*:*:*
cpe:2.3:h:gl-inet:ax1800:-:*:*:*:*:*:*:*
History

16 Jan 2026, 21:28

Type Values Removed Values Added
First Time Gl-inet ax1800
Gl-inet ax1800 Firmware
Gl-inet
CPE cpe:2.3:o:gl-inet:ax1800_firmware:4.6.4:*:*:*:*:*:*:*
cpe:2.3:h:gl-inet:ax1800:-:*:*:*:*:*:*:*
cpe:2.3:o:gl-inet:ax1800_firmware:4.2.0:*:*:*:*:*:*:*
cpe:2.3:o:gl-inet:ax1800_firmware:4.6.8:*:*:*:*:*:*:*
References () https://aleksazatezalo.medium.com/critical-authentication-bypass-vulnerability-in-gl-inet-gl-axt1800-router-firmware-f19442ca721d - () https://aleksazatezalo.medium.com/critical-authentication-bypass-vulnerability-in-gl-inet-gl-axt1800-router-firmware-f19442ca721d - Exploit, Third Party Advisory, Press/Media Coverage
References () https://aleksazatezalo.medium.com/critical-command-injection-vulnerability-in-gl-inet-gl-axt1800-router-firmware-e6d67d81ee51?postPublishedType=repub - () https://aleksazatezalo.medium.com/critical-command-injection-vulnerability-in-gl-inet-gl-axt1800-router-firmware-e6d67d81ee51?postPublishedType=repub - Exploit, Third Party Advisory, Press/Media Coverage
References () https://www.gl-inet.com/ - () https://www.gl-inet.com/ - Product

08 Jan 2026, 17:15

Type Values Removed Values Added
CWE CWE-377 CWE-307

08 Jan 2026, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-08 16:15

Updated : 2026-01-16 21:28

NVD link : CVE-2025-67091

Mitre link : CVE-2025-67091

CVE.ORG link : CVE-2025-67091

JSON object : View

Products Affected

gl-inet

  • ax1800
  • ax1800_firmware
CWE
CWE-307

Improper Restriction of Excessive Authentication Attempts