GL.iNet Routers Improper Authorization Vulnerability in Download Interface

A vulnerability allowing unauthorized file downloads through the download interface has been identified in multiple GL.iNet router models, all running firmware version 4.x. This issue arises from improper authorization checks, enabling users to access restricted files or resources without the necessary permissions.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files or resources on the affected router.

Remediation

Users are advised to upgrade their routers to the latest firmware version that addresses this vulnerability. For specific upgrade instructions, refer to the GL.iNet security advisory published on April 24, 2025.