This vulnerability affects the get_status function of the gRPC Management Interface in SpaceX Starlink Router Gen 3 firmware version 2025.11.14.mr64708.3. Improper access controls allow an attacker with local network access to potentially manipulate or retrieve information without proper authorization. The vulnerability has been publicly disclosed, but there is no known exploit in the wild and no vendor response or patch has been provided as of the publication date.

An attacker on the local network can exploit improper access controls to interact with the gRPC Management Interface's get_status function, potentially gaining unauthorized access to router status information or management functions. The impact is limited by the requirement for local network access and the lack of privilege escalation or remote attack vector. The CVSS 4.0 base score is 5.3 (medium severity).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, network administrators should restrict local network access to trusted users and devices to mitigate risk. Monitor for any future vendor advisories or firmware updates addressing this issue.