CyberRota Analysis
AI-GeneratedThe vulnerability in luci-app-lxc allows low-privileged authenticated users to bypass authorization checks, enabling them to access backend container management routes. By exploiting a path traversal flaw in the `lxc_name` parameter, attackers can escape container directories and execute arbitrary code on the OpenWrt host, potentially gaining root access. Organizations using OpenWrt should prioritize patching this critical vulnerability to safeguard their systems against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. Attackers can exploit path traversal via `/.%2E` in the `lxc_name` parameter to escape container directories and control host-side scripts executed through `lxc.hook.start-host`, achieving root code execution on the OpenWrt host.