CVE-2026-120231

Summary

A command injection flaw exists in the OpenVPN CLI handler of WAVLINK WN553X1-B firmware v260403_2.0.0, where unsanitized user input passed as the 'file_id' argument to function sub_416568 allows attackers to inject and execute arbitrary OS commands remotely.

Exploitability

Exploitation is straightforward for authenticated low-privilege users due to lack of input sanitization; remote initiation is possible via the OpenVPN CLI interface.

Blast radius

Successful exploitation grants full system compromise with high confidentiality, integrity, and availability impact, enabling attackers to fully control the device and potentially pivot into the internal network.

Detection

Look for unusual subprocess spawns or command-line arguments containing shell metacharacters (e.g., ';', '|', '&', '$(') in logs generated by /bin/ioos or related OpenVPN CLI processes; if no such logging exists, no reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version v260403_2.0.1 or later, as the vendor has released a patch addressing this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.