Hacker fantastic and team report a pre-auth remote root exploit against openwrt (twitter.com)

These are serious security researchers and this is almost certainly a widespread vulnerability affecting mainline openwrt.