VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 8, 2026· Updated Jan 8, 2026

CVE-2025-67089

CVE-2025-67089

Description

A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the plugins.install_package RPC method, which fails to properly sanitize user input in package names. Authenticated attackers can exploit this to execute arbitrary commands with root privileges

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • GL-iNet/GL-AXT1800 router firmwaredescription
  • Gl Inet/GL-AXT1800llm-create
    Range: = 4.6.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.