Skip to content
Critical GNU InetUtils Vulnerability Allows Unauthenticated Root Access

Critical GNU InetUtils Vulnerability Allows Unauthenticated Root Access

First seen 22 Jan 2026, 02:59 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

A critical authentication bypass vulnerability in GNU InetUtils' telnetd server has been disclosed, allowing remote attackers to gain root access without credentials. This high-severity flaw affects versions 1.9.3 through 2.7 and is due to improper parameter sanitization in the telnetd authentication mechanism. The vulnerability was reported by a security researcher on January 19, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 185d ago How this analysis works

More articles in this cluster (2)