IEEE P802.11-REVme draft versions D1.1 through D7.0 contain a vulnerability known as FragAttacks affecting mesh networks. This flaw allows an attacker to inject arbitrary frames into mesh networks using WPA, WPA2, WPA3, or WEP when devices support receiving non-SSP A-MSDU frames. The vulnerability stems from an incorrect fix for a previous issue (CVE-2020-24588) and impacts a planned 802.11 standard release as of early 2025.