Description
An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow modification of configuration files, disclosure of sensitive information, or further compromise of device integrity. This issue affects AX53 v1.0: before 1.7.1 Build 20260213.
Affected products
tp-link: archer ax53 firmware; tp-link: archer ax53
References8
- www.tp-link.com/us/support/faq/5055/ Vendor Advisory
- talosintelligence.com/vulnerability_reports/ Third Party Advisory
- www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware Product
- www.tp-link.com/my/support/download/archer-ax53/v1/#Firmware Product
- www.talosintelligence.com/vulnerability_reports/TALOS-2025-2303
- www.talosintelligence.com/vulnerability_reports/TALOS-2025-2307
- www.talosintelligence.com/vulnerability_reports/TALOS-2025-2308
- www.talosintelligence.com/vulnerability_reports/TALOS-2025-2309
Metrics
- CVSS 3.1
-
8.0
HIGH
Score source: NVD
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 4.0
-
8.5
HIGH
Score source: CNA
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 2% percentile: 77 · as of 12 November 2026
- CWE
- CWE-78
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.