Mikrotik RouterOS contains a vulnerability (CVE-2025-42611) due to improper certificate validation (CWE-295). The system uses a shared certificate store for multiple services including OpenVPN, CAPsMAN, and Dot1X, which causes scope confusion in trust validation. This allows any certificate authority present in the system-wide trust store to be trusted in contexts where it should not be, potentially enabling partial or full authentication bypass in affected services. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity. No patch or official remediation level has been published as of the data provided.

The vulnerability can lead to partial or full authentication bypass in several RouterOS services that rely on certificate validation, including CAPsMAN, OpenVPN, and Dot1X. This undermines the confidentiality and integrity of communications secured by these services. However, there are no known exploits in the wild currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should be cautious about the trust relationships configured in the system-wide certificate store and consider limiting the certificate authorities trusted by RouterOS services if possible.