Critical GNU InetUtils Vulnerability Allows Unauthenticated Root Access Via “-f root”

A critical remote authentication bypass vulnerability has been disclosed in GNU InetUtils affecting the telnetd server component. The flaw, reported by a security researcher on January 19, 2026, allows unauthenticated attackers to gain root access by exploiting improper input sanitization in the telnetd authentication mechanism. The vulnerability stems from how telnetd invokes the login program. […]

The post Critical GNU InetUtils Vulnerability Allows Unauthenticated Root Access Via “-f root” appeared first on Cyber Security News.