PT-2026-1872 · Gl.Inet · Gl-Inet Ax1800

CVE-2025-67091 · Publicado 2026-01-08 · Atualizado 2026-01-08

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GL.Inet GL.Inet AX1800 versions 4.6.4 and 4.6.8

Description An issue exists in the GL.iNet custom opkg wrapper script located at /usr/libexec/opkg-call within the GL.Inet AX1800. The script operates with root privileges when activated through the LuCI web interface or authenticated API calls related to package management. The code utilizes shell redirection to establish a lock file in the globally writable /tmp directory, potentially leading to unauthorized access or modification. The vulnerable script is triggered via API calls to manage packages.

Recommendations GL.Inet GL.Inet AX1800 version 4.6.4 should be updated. GL.Inet GL.Inet AX1800 version 4.6.8 should be updated.

Exploit

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-377

CWE-307

Identificadores relacionados

CVE-2025-67091

Produtos afetados

Gl-Inet Ax1800

Referências · 8

• 🔥 https://aleksazatezalo.medium.com/critical-command-injection-vulnerability-in-gl-inet-gl-axt1800-router-firmware-e6d67d81ee51?postPublishedType=repub · Exploit
• 🔥 https://aleksazatezalo.medium.com/critical-authentication-bypass-vulnerability-in-gl-inet-gl-axt1800-router-firmware-f19442ca721d · Exploit
• https://gl-inet.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-67091 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-67091 · Aviso do Fabricante
• https://twitter.com/ZatezaloAleksa/status/2009289090751971839 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2009300019422093819 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2009411055676469352 · Publicação no Twitter