GNU InetUtils Vulnerability Exploited via “-f root” to Achieve Full System Control

Gbhackers •Divya • January 21, 2026

A critical authentication bypass vulnerability in GNU InetUtils’ telnetd server allows remote attackers to gain root access without credentials by exploiting improper parameter sanitization. GNU InetUtils versions 1.9.3 through 2.7 contain a high-severity authentication bypass vulnerability in the telnetd server that enables unauthenticated remote attackers to achieve full system compromise. The flaw stems from insufficient […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical GNU InetUtils Vulnerability Allows Unauthenticated Root Access A critical authentication bypass vulnerability in GNU InetUtils' telnetd server has been disclosed, allowing remote attackers to gain root access without credentials. This high-severity flaw affects versions 1.9.3 through 2.7 and is due to improper parameter sanitization in the telnetd authentication mechanism. The vulnerability was reported by a security researcher on January 19, 2026. 2 sources 48

Extracted Entities

Platforms (1)

GNU InetUtils Telnetd