Grade F · High Risk

Is GL.iNet Safe?

GL.iNet is a Hong Kong company with manufacturing in Guangzhou, China. F grade. Chinese National Intelligence Law applies. Full security analysis.

Last reviewed: March 2026 · ismyroutersafe.com

Ownership & FCC Status
Owner
GL Technologies (Hong Kong, China operations)
FCC Status
FCC authorized - no formal ban order
Ban Status
No formal ban order - Chinese ownership risk applies
Manufacturing
China (Guangzhou)
Models in DB
1 analyzed
Grade Range
F

Security Verdict

GL.iNet (GL Technologies, Hong Kong Ltd.) operates from Hong Kong and manufactures in Guangzhou, China. Despite its strong reputation among VPN and privacy enthusiasts for its OpenWrt-based firmware and travel router features, GL.iNet carries meaningful national security risk. China's National Intelligence Law extends to Hong Kong and to manufacturing operations in mainland China. GL.iNet is not on the FCC Covered List and has no formal ban order, but the ownership and manufacturing structure creates the same structural risk as other Chinese-owned brands. The open-source OpenWrt firmware helps with transparency but does not eliminate the supply chain and ownership concerns.

Bottom line: Popular with privacy advocates but subject to Chinese National Intelligence Law via Hong Kong operations. Higher risk than Taiwan-based brands.

Corporate Ownership Structure

GL Technologies (Hong Kong) Limited is incorporated in Hong Kong, with its primary manufacturing subsidiary Guangzhou GL Technology Co., Ltd. operating in mainland China. China's national security law was extended to cover Hong Kong in June 2020. Manufacturing in Guangzhou is fully subject to China's National Intelligence Law. GL.iNet is more transparent than most Chinese router brands - its firmware is based on open-source OpenWrt - but the legal jurisdiction of ownership and the supply chain remain subject to Chinese state law.

GL.iNet Models - Security Grades

All GL.iNet models in our database. Click a model for its full security report.

Model Grade FCC Status Security Support Made In
Beryl AX (GL-MT3000) F FCC authorized Active China

Key Risk Factors

Chinese National Intelligence Law via Hong Kong
China's national intelligence law applies to Hong Kong and to the Guangzhou manufacturing operations. GL.iNet has no legal separation from Chinese state intelligence requirements.
Not on formal ban list
GL.iNet has no explicit FCC Covered List entry or formal ban order as of March 2026, unlike TP-Link and Huawei.
Open-source firmware partially mitigates risk
GL.iNet's OpenWrt-based firmware is auditable. However, hardware supply chain risk and ownership remain.

Known CVEs - GL.iNet Routers

The following vulnerabilities from the NIST National Vulnerability Database affect GL.iNet router models. This is a representative sample; the full CVE list may be longer.

CVE-2023-46454 Critical (CVSS 9.8)
Stack-based buffer overflow via the gl-ngx-package API endpoint. Unauthenticated remote code execution on all GL.iNet models running firmware prior to version 4.5.0.
CVE-2023-46455 High (CVSS 7.5)
Path traversal vulnerability allowing unauthenticated attackers to read arbitrary files from the router filesystem - including configuration, credentials, and keys.

Frequently Asked Questions

GL.iNet is popular with VPN users and security researchers for its OpenWrt-based firmware, but it is a Hong Kong company that manufactures in Guangzhou, China. China's National Intelligence Law applies to Hong Kong and these operations. It is safer than Huawei, but carries more risk than Taiwan-based alternatives like Asus or Synology.

GL.iNet does not have a formal FCC ban order as of March 2026. However, its Chinese ownership and manufacturing structure creates structural risk under China's National Intelligence Law.

Flashing upstream OpenWrt directly removes GL.iNet's custom code and reduces software-level risk. However, it does not address hardware supply chain concerns or the company's legal obligations under Chinese law.

CHECK YOUR SPECIFIC MODEL

Get your router's full security report

Check any specific model for CVEs, FCC status, security capabilities, and your personalized action plan.

Check a Router → Top 10 Safe Routers
A free public tool made with 🦾 by Rio