Faller-Dql

**Name of the Vulnerable Software and Affected Versions** luci-app-openvpn (affected versions not specified) **Description** Authenticated users can perform path traversal and write arbitrary files outside the intended directory because the software fails to properly validate the `instance name2` parameter during file upload. This allows attackers to upload malicious payloads, such as SSH keys, into system directories to achieve persistent root code execution upon reboot. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** luci-app-lxc (affected versions not specified) **Description** An ACL inconsistency allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. By using path traversal via `/.%2E` in the `lxc name` parameter, an attacker can escape container directories and control host-side scripts executed through `lxc.hook.start-host`, resulting in root code execution on the OpenWrt host. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.