This vulnerability involves improper neutralization of special elements used in OS commands (CWE-78) within the dnsmasq module of TP-Link Archer AX53 v1.0 devices running firmware versions prior to 1.7.1 Build 20260213. An authenticated attacker on an adjacent network can exploit insufficient input validation when the device processes a crafted configuration file, enabling arbitrary code execution. This could allow the attacker to alter device settings, access sensitive data, or compromise system integrity. The CVSS 4.0 base score is 8.5, indicating high severity. There is no vendor advisory or patch information available at this time.

Successful exploitation enables an authenticated adjacent attacker to execute arbitrary OS commands on the affected device. This can result in unauthorized modification of device configuration, exposure of sensitive information, and potential further compromise of the device's system integrity. The vulnerability affects TP-Link Archer AX53 v1.0 devices running firmware versions before 1.7.1 Build 20260213.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device management interface to trusted users only and monitor for suspicious activity. Avoid processing untrusted configuration files. No official patch or temporary fix has been documented at this time.