odhcpd is OpenWrt’s network configuration daemon. It handles DHCPv4 and DHCPv6 leases, sends router advertisements, and helps clients learn how to reach the router, DNS servers, and the wider network. On many OpenWrt systems it is part of the default IPv6 plumbing, so it often runs continuously and processes traffic from devices on the local network.
In cyber security, odhcpd matters because services that parse unauthenticated network packets are a common attack surface. If its packet handling has a memory-safety bug or logic flaw, a crafted DHCPv6 request or related message may crash the service, disrupt connectivity, or in the worst case lead to code execution with router privileges. Defenders reduce risk by keeping OpenWrt updated, limiting the service to trusted interfaces, and disabling DHCPv6 or router advertisements on networks that do not need them. Monitoring and segmenting guest or untrusted devices also helps contain exposure.