Critical · published January 21, 2026
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.9th percentile for exploit probability.
🚨 A single command is all it takes to bypass authentication in telnetd! This sneaky exploit allows attackers to log in as root without breaking a sweat. 🔥 It's like having a hotel where anyone can enter just by whispering the right password to the doorman—no ID needed! The door to your most critical systems could be wide open. 🔑 This vulnerability opens the floodgates for attackers to access your system with complete control. Imagine them walking in as the root user, able to read, modify, or even delete your data—absolutely devastating for your security!
It's like having a hotel where anyone can enter just by whispering the right password to the doorman—no ID needed! The door to your most critical systems could be wide open. 🔑 CVE-2026-24061 allows remote attackers to bypass authentication in GNU Inetutils telnetd by setting the USER environment variable to '-f root'. This means they can gain unauthorized access to the system without legitimate credentials.
This vulnerability opens the floodgates for attackers to access your system with complete control. Imagine them walking in as the root user, able to read, modify, or even delete your data—absolutely devastating for your security! To protect your systems, immediately patch telnetd to version 2.8 or later. Review security settings and ensure that you aren't unintentionally exposing telnet services. Disable telnet in favor of secure alternatives like SSH for remote access. You've got this! Follow these steps to lock down your system and secure your environment. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| gnu/inetutils | ≥ 1.9.3, ≤ 2.7 | — |
| debian/debian_linux | all versions | — |