# CVE-2025-67091: An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6.4 & 4.6.8 in the…

Source: https://junglewise.ai/threats/cve-2025-67091-an-issue-in-gl-inet-gl-inet-ax1800-version-4-6-4-4-6-8-are  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-01-08  
License: CC BY 4.0 with a link back

CVE-2025-67091 · Severity: medium · CVSS 6.5 · Published 2026-01-08

An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6.4 & 4.6.8 in the GL.iNet custom opkg wrapper script located at /usr/libexec/opkg-call. The script is executed with root privileges when triggered via the LuCI web interface or authenticated API calls to manage packages. The vulnerable code uses shell redirection to create a lock file in the world-writable /tmp directory.

Technologies: [GL.iNet AX1800](https://junglewise.ai/threats/technologies/ax1800). Vendors: [GL.iNet](https://junglewise.ai/threats/vendors/gl-inet).

## Quick answers

**Is CVE-2025-67091 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-67091 being exploited in the wild.

**How severe is CVE-2025-67091?** Medium severity, with a CVSS score of 6.5, published 8 January 2026.

**Which products and versions are affected?** GL.iNet AX1800, GL.iNet Ax1800 Firmware. The advisory does not name versions.

**Is there a fix for CVE-2025-67091?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-67091?** Check whether you run GL.iNet AX1800 or GL.iNet Ax1800 Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- GL.iNet AX1800
- GL.iNet Ax1800 Firmware

## Related threats

- [GL.iNet multiple routers OS command injection in NAS service](https://junglewise.ai/threats/cve-2026-19983-gl-inet-multiple-routers-os-command-injection-in-nas-service)
- [GL.iNet Router OS command injection in Wi-Fi Timer Power-Schedule](https://junglewise.ai/threats/cve-2026-19981-gl-inet-router-os-command-injection-in-wi-fi-timer-power-schedule)
- [GL.iNet Router Code Injection in Language Update](https://junglewise.ai/threats/cve-2026-19980-gl-inet-router-code-injection-in-language-update)
- [GL.iNet WebDAV authorization bypass in COPY/MOVE](https://junglewise.ai/threats/cve-2026-19979-gl-inet-webdav-authorization-bypass-in-copy-move)
- [GL.iNet AX1800 command injection in RPC endpoint](https://junglewise.ai/threats/cve-2026-18787-gl-inet-ax1800-command-injection-in-rpc-endpoint)