Firmware Download Center
Search your GL.iNet device firmware by the router product name or model name. How to find model name?
GL.iNet Router Firmware & OpenWrt Version Status Updates
GL.iNet Router Firmware & OpenWrt Version Status Updates
Security Updates
We've recently identified two critical security vulnerabilities:
CVE-2024-39225: This vulnerability allowed unauthenticated users to gain remote code execution (RCE) with root privileges through a specific attack vector.
CVE-2024-39227: This vulnerability permitted unauthenticated users to access /cgi-bin/glc, enabling the execution of arbitrary methods in the C library.
Both vulnerabilities had a CVSS score of 9.8.
We take security seriously, and we're pleased to inform you that these issues have been resolved in our latest firmware update. We strongly recommend all users to update their devices to ensure continued security. For further information, please refer to the security advisory released on Augest 1st, 2024 .To find the full list, go to the
Security Advisories page and follow these steps to update your router. CVE-2024-39225: This vulnerability allowed unauthenticated users to gain remote code execution (RCE) with root privileges through a specific attack vector.
CVE-2024-39227: This vulnerability permitted unauthenticated users to access /cgi-bin/glc, enabling the execution of arbitrary methods in the C library.
Both vulnerabilities had a CVSS score of 9.8.
We take security seriously, and we're pleased to inform you that these issues have been resolved in our latest firmware update. We strongly recommend all users to update their devices to ensure continued security. For further information, please refer to the security advisory released on Augest 1st, 2024 .To find the full list, go to the
Getting Started with Firmware Ver. 4.7+
At GL.iNet, we are committed to continuous innovation and improvement. Our firmware is in constant development to ensure enhanced performance, robust security, and seamless functionality. We strive to improve existing products, address bugs, introduce new features, and contribute to the ever-evolving OpenWrt ecosystem in collaboration with developers worldwide.
Release Roadmap
Ver. 4.8
- Target Release Time: Planned Q2, 2025
- Overview: Firmware v4.8 will prioritize bug fixes, stability enhancements, and general performance improvements to deliver a smoother and more reliable user experience.
- Milestone Issues: Learn more
- Supported Models:Beryl AX (GL-MT3000), Brume 2 (GL-MT2500), Flint 2 (GL-MT6000), Puli AX (GL-XE3000), Spitz AX (GL-X3000), Slate AX (GL-AXT1800), Spitz Plus (GL-X2000), Slate 7 (GL-BE3600).
Ver. 4.7 Stable Release
Release Time
2024-12-12 14:15:35(UTC+08:00)
Overview
Firmware Version 4.7 brings a host of new features and improvements, including device wizard, AstroWarp mode, cloud login, domain list subscription, and support for various VPNs. It also expands support for various VPN protocols and optimizes processes such as WireGuard configuration, VPN client file management, and the flexibility of Repeater random MAC settings, ensuring a smoother and more efficient user experience.
Supported Models
Beryl AX (GL-MT3000), Brume 2 (GL-MT2500)/(GL-MT2500A), Flint 2 (GL-MT6000), Puli AX(GL-XE3000), Spitz AX(GL-X3000), Flint (GL-AX1800), Slate AX (GL-AXT1800).
New Features
* Device Wizard: Streamlines setup by including administrator and Wi-Fi password configurations, networking, VPN, and other core settings.
* AstroWarp Mode: Create your own network with aggregated connections and cloud gateways for a high-speed, stable experience.
* Cloud Account Login: Supports binding devices to the cloud directly from the firmware’s web interface.
* Domain Name List Subscription: Enables VPN policies and parental controls by subscribing to domain name or IP lists via URL.
* Support for Control D DNS: Offers enhanced DNS control and filtering.
* AP Isolation: Isolates connected devices to improve security.
* Luci Access Restriction: Provides additional management options for network access.
* USB Port Protocol Conversion: Allows USB 3.0 to switch to USB 2.0 for better compatibility.
* Network Port Management: Features scheduled and automatic Ethernet MAC updates, WAN/LAN port switching, and displays network port negotiation rates.
* VPN Support: NordVPN, PIA, Surfshark, Hideme, IPVanish WireGuard VPN, and support AzireVPN registration function.
* AstroWarp Mode: Create your own network with aggregated connections and cloud gateways for a high-speed, stable experience.
* Cloud Account Login: Supports binding devices to the cloud directly from the firmware’s web interface.
* Domain Name List Subscription: Enables VPN policies and parental controls by subscribing to domain name or IP lists via URL.
* Support for Control D DNS: Offers enhanced DNS control and filtering.
* AP Isolation: Isolates connected devices to improve security.
* Luci Access Restriction: Provides additional management options for network access.
* USB Port Protocol Conversion: Allows USB 3.0 to switch to USB 2.0 for better compatibility.
* Network Port Management: Features scheduled and automatic Ethernet MAC updates, WAN/LAN port switching, and displays network port negotiation rates.
* VPN Support: NordVPN, PIA, Surfshark, Hideme, IPVanish WireGuard VPN, and support AzireVPN registration function.
Optimization
* WireGuard Enhancements: Streamlined the process of adding client configuration files with automatic key generation.
* VPN Client Profiles: Simplified configuration of vendor profiles for easier setup.
* Repeater MAC Updates: Added support for scheduled updates and automatic restarts of random MAC settings.
* Multi-WAN Detection: Improved network status detection for load balancing.
* OpenVPN Client: Enabled modification of configuration file names for greater flexibility.
* Web Admin Panel: Router hostnames now appear in browser tabs for easy identification.
* UI Improvements: Enhanced page interactions, error messages, and drop-down list functionality.
* AdGuard Home: Upgraded to version 0.107.52 for better ad-blocking performance.
* Tor: Updated to version 0.4.8.9, improving security and stability.
* VPN Client Profiles: Simplified configuration of vendor profiles for easier setup.
* Repeater MAC Updates: Added support for scheduled updates and automatic restarts of random MAC settings.
* Multi-WAN Detection: Improved network status detection for load balancing.
* OpenVPN Client: Enabled modification of configuration file names for greater flexibility.
* Web Admin Panel: Router hostnames now appear in browser tabs for easy identification.
* UI Improvements: Enhanced page interactions, error messages, and drop-down list functionality.
* AdGuard Home: Upgraded to version 0.107.52 for better ad-blocking performance.
* Tor: Updated to version 0.4.8.9, improving security and stability.
Bug Fixes
* Fixed an issue where the name of a wired connection in the client list was displayed as "unknown" when the client connected to the device using both wired and wireless methods simultaneously.
* Resolved an issue where certain mobile phones (e.g., Xiaomi 10, Huawei) could not connect via QR code when the 2.4G Guest Wi-Fi was encrypted with WPA3 or hidden.
* Fixed an issue where port forwarding rules remained active even when the DMZ priority was set to the highest level.
* Addressed a bug where devices in a Tailnet organization with a Tailscale email domain name randomly displayed the email addresses of other devices in the same organization.
* Fixed an issue where the first modification of MAC mode did not take effect after a successful relay connection.
* Resolved a problem where manually configured APN settings reverted to default after a router restart.
* Fixed a DNS leakage issue that occurred when connecting to a VPN client via a wired network with IPv6 and Modem dialing enabled.
* Corrected a problem where changing the password of one wireless band disconnected clients on other bands.
* Fixed an issue where the randomized BSSID was automatically disabled after Wi-Fi configurations were modified via the cloud platform.
* Resolved an issue where the page displayed "Checking for channel availability" even when the selected 5G Wi-Fi channel was not a DFS channel.
* Addressed a problem where the WAN port provided DHCP services in Drop-in Gateway mode when the "Some devices select their own networking gateway" option was enabled.
* Fixed an issue where IPv6 online status detection was not performed on external M.2 modules.
* Corrected an error where the page reported an "unknown error" when a PPPoE username or password exceeded 256 characters.
* Fixed a bug where established SSH connections remained active even after Remote SSH was turned off.
* Resolved an issue where certain mobile phones (e.g., Xiaomi 10, Huawei) could not connect via QR code when the 2.4G Guest Wi-Fi was encrypted with WPA3 or hidden.
* Fixed an issue where port forwarding rules remained active even when the DMZ priority was set to the highest level.
* Addressed a bug where devices in a Tailnet organization with a Tailscale email domain name randomly displayed the email addresses of other devices in the same organization.
* Fixed an issue where the first modification of MAC mode did not take effect after a successful relay connection.
* Resolved a problem where manually configured APN settings reverted to default after a router restart.
* Fixed a DNS leakage issue that occurred when connecting to a VPN client via a wired network with IPv6 and Modem dialing enabled.
* Corrected a problem where changing the password of one wireless band disconnected clients on other bands.
* Fixed an issue where the randomized BSSID was automatically disabled after Wi-Fi configurations were modified via the cloud platform.
* Resolved an issue where the page displayed "Checking for channel availability" even when the selected 5G Wi-Fi channel was not a DFS channel.
* Addressed a problem where the WAN port provided DHCP services in Drop-in Gateway mode when the "Some devices select their own networking gateway" option was enabled.
* Fixed an issue where IPv6 online status detection was not performed on external M.2 modules.
* Corrected an error where the page reported an "unknown error" when a PPPoE username or password exceeded 256 characters.
* Fixed a bug where established SSH connections remained active even after Remote SSH was turned off.