CVE-2025-67089

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-01-08 · updated 2026-06-17
Weakness: CWE-77

Description

A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present in the `plugins.install_package` RPC method, which fails to properly sanitize user input in package names. Authenticated attackers can exploit this to execute arbitrary commands with root privileges

Affected products

GL-iNet Gl-Axt1800 Firmware: 4.2.0, 4.6.4, 4.6.8

References

https://aleksazatezalo.medium.com/critical-command-injection-vulnerability-in-gl-inet-gl-axt1800-router-firmware-e6d67d81ee51?postPublishedType=repub
https://www.gl-inet.com/security-updates/

Get alerted when CVE-2025-67089 or the next vulnerability affects your stack