TP‑Link TL‑WR841N firmware Version 14 contains an authenticated OS command injection flaw in the IPv6 WAN configuration. A crafted IPv6 Gateway value is inserted directly into a system command, enabling an authenticated administrator to execute arbitrary operating system commands. According to the report, successful exploitation can lead to unauthorized access to sensitive data, modification of device configuration or services, and disruption of device operation. The weakness falls under CWE‑78.

The vulnerability affects TP‑Link System Inc. TL‑WR841N routers running firmware v14. No other firmware versions are listed as affected.

With a CVSS score of 8.5 it is considered high severity. The vulnerability is not listed in the CISA KEV catalog, indicating no known widespread exploitation yet. Attack requires valid administrative credentials, but once authenticated an attacker can run arbitrary commands on the device. Because the vulnerability impacts system integrity and confidentiality and could lead to full device takeover, it poses a significant risk to networks that rely on these routers for edge connectivity. The EPSS score is not available, so the likelihood of exploitation cannot be quantified at this time.