Skip to content
OpenAdvisories

Product · openwrt

luci-proto-openvpn

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-58000

    luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey

    luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus method where the cl_meta parameter is interpolated into a shell command without proper escaping or quoting. An authenticated LuCI us…

    openwrt luci-proto-openvpn