Security: openwrt/luci
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
luci-app-travelmate delegated UCI write can execute travelmate auto-login command as rootGHSA-p35r-3323-6g7g published
Jun 17, 2026 by dibdotHigh -
luci-app-advanced-reboot read ACL exposes /bin/sh through file.exec, allowing delegated users to run commands as rootGHSA-vj96-f37g-37f6 published
Jun 16, 2026 by stangriHigh -
`luci-app-tailscale-community` allows delegated LuCI users to execute commands as root through `tailscale.do_login`GHSA-xwc5-mx58-rh35 published
Jun 11, 2026 by jow-Critical -
luci-app-adblock-fast:Delegated `luci-app-adblock-fast` users can reach root command execution by injecting newline-separated cron entriesGHSA-ggpf-xrph-wg5v published
Jun 15, 2026 by stangriHigh -
luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modalGHSA-vvj6-7362-pjrw published
Mar 18, 2026 by AnsuelHigh
Learn more about advisories related to openwrt/luci in the GitHub Advisory Database