cbcvebase.

Openwrt Luci-Proto-Openvpn vulnerabilities

1 known vulnerability affecting openwrt/luci-proto-openvpn.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2026-58000P2HIGHCVSS 8.8≤ 0.11.12026-06-29
CVE-2026-58000 [HIGH] CWE-78 CVE-2026-58000: luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerabili luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus method where the cl_meta parameter is interpolated into a shell command without proper escaping or quoting. An authenticated LuCI user with OpenVPN protocol configuration access can inject arbitrary shell metacharacters into cl
nvd
Openwrt Luci-Proto-Openvpn vulnerabilities | cvebase