Threat for ARP Spoofing, so in short yes.
Since the ARP protocol is used to find the MAC address of a device corresponding to its IP address, associating the attacker MAC address with the victim's IP (like default gateway) would redirect all traffic supposed to be for the IP to the attacker. That means that data frames can be collected, and so on. Although this is not a MITM yet, it poses as an opening for one, or DOS or session hijacking.
I am a bit confused though, because you're not receiving ARP responses, but requests instead. Usually this kind of attack is conducted by crafting spoofed ARP responses, as the idea is to exploit the lack of authentication in the ARP protocol by sending spoofed ARP messages onto the LAN. In this case the attacker would send an ARP Response to the access point and the victim.
Keep in mind 2 things:
- The machines in a network accept ARP Responses even if they haven’t sent an ARP Request.
- The machines trust these ARP Responses without any verification.
So, the fact that you're getting requests is a good sign. Was it going to be responses I would have thought you were under an active attack. It would make sense to investigate this more.
How to defend yourself:
Static ARP entries or a Software (but it depends which OS you're running)