OpenBSD erratum 018:
WiFi clients using WPA1 or WPA2 are vulnerable to a man-in-the-middle attack by rouge access points.