Log Parsing Vulnerability in luci-app-banip by OpenWrt

CVE-2026-62184

What is CVE-2026-62184?

The luci-app-banip contains a log parsing vulnerability that puts users at risk through improper handling of log line data. Specifically, the awk-based parser is designed to extract the first IPv4 address found within a log entry, regardless of its actual field position. This flaw opens the door for attackers to inject arbitrary IP addresses into the system via fields that are typically controlled by the user, such as usernames. Consequently, an unauthenticated remote attacker can exploit this vulnerability to manipulate the banIP system, causing it to erroneously block the wrong target IP address, while leaving the real attacker unimpeded. This misconfiguration undermines the efficacy of the security measures intended to protect network integrity.

References