A vulnerability, which was classified as critical , has been found in GL.iNet GL-MT3000 4.4.5 . This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler . Performing a manipulation of the argument dev_name results in command injection. This vulnerability is cataloged as CVE-2026-11450 . It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component. The vendor confirms: "