Critical OpenWrt DHCPv6 Flaw Allows Unauthenticated Root Code Execution

A critical security vulnerability has been discovered in OpenWrt's DHCPv6 implementation, allowing unauthenticated attackers to execute arbitrary code as root. The flaw affects many routers and IoT devices running the open-source firmware, potentially giving attackers full device control without any credentials. This is significant because it could lead to widespread exploitation, compromising network security and privacy.

Sources (4)