Release Asuswrt-Merlin 3004.388.11 is now available

[RMerlin]

Asuswrt-Merlin 3004.388.11 is now available. The focus of this release is merging a new GPL (largely security fixes), the removal of AiCloud due to repeated security issues, and the new Traffic Monitor redesign that was initially introduced in 3006.102.6.

Changes since 3004.388.10_2:

3004.388.11 (26-Dec-2025)
  - NOTE: AiCloud has been removed from Asuswrt-Merlin due
          to its poor security track record.  This also includes
          cloud syncing features such as Asuswebstorage or
          Dropbox syncing with USB folder.  Use a VPN if you
          need secure remote access to your data.

  - NOTE: For developers, the Tomato legacy files (tm*.*)
          are no longer included with the webui.  Please
          update your addon pages accordingly.

  - NEW: Redesigned Traffic Monitor pages.
         - Uses Chart.js for Realtime and Last24 pages
         - Removes legacy Tomato code
         - Last 24 can be zoomed in and panned (mouse wheel
           and pinch-to-zoom gestures are both supported)
         - Realtime and Last 24 now show as bits/s instead
           of bytes/s
         - Settings moved from the tab to the dropdown menu
         - Removed NVRAM database location option and added
           JFFS.  Also removed rarely used start-of-month
           setting.

  - UPDATED: Merged GPL 388_25575.
  - UPDATED: OpenVPN to 2.6.17.
  - UPDATED: libcap-ng to 0.8.4 (to be in sync with upstream)
  - UPDATED: Dropbear to 2025.89.
  - UPDATED: nettle to 3.10.2.
  - CHANGED: TrafficMonitor stats can now be saved to JFFS,
             and removed support for saving to NVRAM.
  - FIXED: IPv6 blocking of DoT servers (dave14305)
  - REMOVED: outdated setuprsa.sh script.
  - REMOVED: AiCloud support, due to security reasons.

Please keep discussions on this specific release.

Downloads are here.
Changelog is here.

 

[RMerlin]

Reserved post.

 

[tallytr]

Works for me on RT-AX86U, thank you.

 

[lgkahn]

dirty upgrade on axe11000 from beta .. no issues

 

[Reef2009]

AX88u onboard!

 

[worf105]

AX86U updated, No problems. Thank You.

 

[bartj12]

Ax86s, all ok.

 

[MacG32]

Updated smooth as silk. Everything's running optimal. Thank you very much!

 

[Stpa67]

Ax58u upgraded from beta 11.

 

[bartj12]

AX86U, all ok. Thanks again!

 

[Unisoft]

3 x AX86U upgraded, no issues.

 

[Quoc Huynh]

AX88U dirty upgrade from 388.10_2 with no issue. Thank you very much! Moreover, Merry Christmas and Happy New Year to you, RMerlin

 

[acale75]

Thank you very much for your work RMerlin

 

[Tim Storey]

Opened RT-X68U box, connected router to spare SmartNID port, connected computer to router, logged on, dirty upgrade firmware from beta, checked all connections (everything worked great), shut down router, comnnected computer to main router, put backup RT-AX68U back in box, put cables back in filing cabinet.

 

[Cleanev]

Upgrade from 10_2 to 11 works find on RT-AX86U. Clean traffic monitor page.
Thank you for your work

 

[Unetwork]

Dirty update from 388.10_2 to 388.11.
No hard reset this time after the update (I don't think it's necessary)

Everything works perfectly, the new traffic monitor interface is superb !

I noticed that some words on the new traffic monitor have not been translated into French. It would be good to correct this when you get a chance.

Once again, thank you for your excellent work.

 

[bits]

I have a RT-AX86U.
Just had for the second time in the last few days a Samsung phone on the network detect suspicious activity on wifi network and ask if the user wanted to disconnect from the network.
Once the Samsung was my phone and this time it was my wife's phone. Both times the phone was actively in use on the wifi at the time the message popped up.

I checked the log on the Asus and it appears the router rebooted. I didn't checked the logs when it occurred to my phone.
My theory at the moment is the Samsung's see the wifi disconnect and then reconnect and thinks that is suspicious? Maybe it sees the routers clock change also but I am not certain if it has a way of seeing that?

I don't think anything else sus on my network is occurring beyond the router unexpectedly rebooted.

The phones complaining is new to this firmware which I believe means these reboots are new to this firmware.


Dec 29 03:04:31 dnsmasq-dhcp[2573]: DHCPREQUEST(br0) 192.168.93.163 24:a1:60:xx:xx:xx
Dec 29 03:04:31 dnsmasq-dhcp[2573]: DHCPACK(br0) 192.168.93.163 24:a1:60:xx:xx:xx espressif
Jan 1 10:30:21 syslogd started: BusyBox v1.25.1
Jan 1 10:30:21 kernel: klogd started: BusyBox v1.25.1 (2025-12-26 12:25:32 EST)
Jan 1 10:30:21 kernel: Booting Linux on physical CPU 0x0
Jan 1 10:30:21 kernel: Linux version 4.1.52 (merlin@ubuntu-dev) (gcc version 5.5.0 (Buildroot 2017.11.1) ) #2 SMP PREEMPT Fri Dec 26 12:44:30 EST 2025
Jan 1 10:30:21 kernel: CPU: AArch64 Processor [420f1000] revision 0

<Snip>

Jan 1 10:30:34 wlceventd: wlceventd_proc_event(685): eth7: Auth D8:8C:79:xx:xx:xx, status: Successful (0), rssi:0
Dec 29 03:06:35 hostapd: eth7: STA d8:8c:79:xx:xx:xx IEEE 802.11: associated

 

[mnemonicj]

Is AiCloud an issue if you don't have it in active use?
I recently converted my Asus routers over to APs with a Ubiquiti router and I was hoping to understand if I should load this firmware update. The traffic monitor would be a nice to have, but would the security of my Asus devices be suspect with the older firmware?

 

[RMerlin]

I noticed that some words on the new traffic monitor have not been translated into French. It would be good to correct this when you get a chance.

That would require modifying the language dictionnaries, which I don't do:

1) I don't speak the 20+ languages supported by Asuswrt
2) It would make all future webui GPL merges a nightmare to handle

So, anything that I write UI-wise and which does not already have an existing translated string will be hardcoded in English, sorry.

 

[RMerlin]

Is AiCloud an issue if you don't have it in active use?

No, it's only an issue if you enable and use it.

I recently converted my Asus routers over to APs with a Ubiquiti router and I was hoping to understand if I should lead this firmware update. The traffic monitor would be a nice to have, but would the security of my Asus devices be suspect with the older firmware?

The traffic monitor wouldn't really be of any use in an AP, monitoring would need to be done by the primary router itself.