A vulnerability was found in GL-iNet GL-AXT1800 4.6.8 and classified as critical. The affected element is the function
plugins.install_package of the component RPC. Such manipulation leads to command injection.
This vulnerability is listed as CVE-2025-67089. The attack may be performed from remote. There is no available exploit.
