CVE-2025-31715

A flaw in vowifi service allows attackers to inject malicious commands through improperly validated user input, potentially gaining unauthorized elevated privileges on the system.

Remote command injection vulnerability in vowifi service stemming from insufficient input validation. Attackers can exploit this via network access without requiring prior privileges, achieving arbitrary code execution and privilege escalation on the affected system.