A Hidden WebFig Bug That Could Be Silently Breaking Your MikroTik Wi-Fi Configs

On a recent episode of Bridge Mode, hosts Marc from Admiral Platform and Tyler from DM-Tech Wireless walked through a strange and potentially serious bug they’d uncovered in RouterOS 7 — one that appears to affect every version they tested, including the latest stable release and the newest long-term support build.

The setup: DMT runs a fairly standard, out-of-the-box-adjacent Wi-Fi configuration on their routers — split 2.4 GHz and 5 GHz SSIDs, a hidden management network, and hierarchical configuration objects that reference separate channel, security, and data path definitions. Nothing custom or “hacky,” as Tyler put it — just the normal, supported RouterOS v7 workflow.

The bug: When editing a Wi-Fi configuration through WebFig (rather than WinBox), simply opening a config and clicking “OK” — even without changing a single setting — can silently strip out the associated channel and data path assignments. The channel width and data path references just vanish, with no warning that anything was lost.

Stranger still, the bug is inconsistent: it doesn’t always trigger, and it seems to depend on prior actions in the same browser session. In their testing, once you’d opened any Wi-Fi configuration object in WebFig — even without saving changes — it seemed to “protect” other configs from the bug until the page was refreshed. Canceling out of a config instead of saving also avoided the issue. Refreshing the page reset the vulnerable state entirely.

The pair couldn’t find any existing reports of the issue on the forums, and were at a loss for why it hadn’t surfaced before, given how core this workflow is to standard RouterOS Wi-Fi setup. Their takeaway: stop relying on WebFig for Wi-Fi configuration changes and use WinBox instead, which didn’t reproduce the problem in any of their tests.

Bottom line for network operators: if you manage RouterOS 7 devices and use WebFig for Wi-Fi config changes, it may be worth auditing your deployments for silently dropped channel or data path settings — and switching to WinBox in the meantime.

Have a network story or discovery of your own? Bridge Mode is looking for operators to feature.