CVE-2025-65292 - Aqara Hub M2 Firmware, Aqara Camera Hub G3 Firmware and Aqara Hub M3 Firmware

Critical 7.3

Command injection vulnerability in Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 allows attackers to execute arbitrary commands with root privileges through malicious domain names.

Affected software

Aqara Hub M2 Firmware

Aqara Camera Hub G3 Firmware

Aqara Hub M3 Firmware

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.