The vulnerability in OpenWrt luci-app-samba4 involves improper privilege management that grants file execution permission on /usr/sbin/smbd to authenticated delegated users via read ACL. This allows these users to execute the Samba daemon with command-line arguments they control. Specifically, attackers can supply arbitrary Samba global options such as the message command to a root-privileged smbd process, which can trigger command execution when processing SMB protocol messages. The CVSS 4.0 score is 8.7, indicating a high severity with network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability.

Authenticated delegated users can execute the Samba daemon with arbitrary command-line arguments under root privileges, potentially leading to remote command execution on the affected system. This compromises system confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been provided at this time. Until a fix is available, restrict authenticated delegated user permissions and monitor for suspicious activity related to Samba daemon execution.