Back Cybersecuritynews

Critical GNU InetUtils Vulnerability Allows Unauthenticated Root Access Via “-f root”

Cybersecuritynews •Abinaya • January 21, 2026

A critical remote authentication bypass vulnerability has been disclosed in GNU InetUtils affecting the telnetd server component. The flaw, reported by a security researcher on January 19, 2026, allows unauthenticated attackers to gain root access by exploiting improper input sanitization in the telnetd authentication mechanism. The vulnerability stems from how telnetd invokes the login program. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical GNU InetUtils Vulnerability Allows Unauthenticated Root Access A critical authentication bypass vulnerability in GNU InetUtils' telnetd server has been disclosed, allowing remote attackers to gain root access without credentials. This high-severity flaw affects versions 1.9.3 through 2.7 and is due to improper parameter sanitization in the telnetd authentication mechanism. The vulnerability was reported by a security researcher on January 19, 2026. 2 sources 48

Critical GNU InetUtils Vulnerability Allows Unauthenticated Root Access Via “-f root”

The full story

Extracted Entities

Attack Types (1)

Vulnerabilities (1)