AirTight Networks says Wi-Fi Protected Access 2 has a “soft underbelly inside” due to an overlooked vulnerability. An attacker can decrypt traffic that’s been encrypted with WPA2. The vulnerability is known as Address Resolution Protocol (ARP) spoofing, a “man in the middle attack” The attacker does not actually recover, break or crack any encryption keys, expert Matthew Gast says. Check to make sure “client isolation” is turned on in your access points.”]
Source: https://www.csoonline.com/article/2125769/wi-fi-wpa2-vulnerability-faq.html