Critical vulnerabilities of DHCPv6 on Openwrt 24 and 25

Router
1

I just saw this post about several new security vulnerabilities on Openwrt 24 and 25.

2

Thank you for providing this information!

We will coordinate with the R&D team to address this issue. This process will take some time, and we will notify you immediately once there are any updates.

3 Likes
4

If you're running OpenWrt 25.12.5 with OP25 4.9.1 on an MT3000 or MT6000, these critical vulnerabilities have already been fixed.

1 Like
5

Thank you for your patience.

We have merged the patch based on the official gl router firmware and resolved this issue.

The formal release will be scheduled accordingly.