Logo
›
›vulnerability›CVE-2026-24061
Name
CVE-2026-24061
Source
NVD ( link)Debian ( link)
Description
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
CWEs
CWE-88
Published Date
Updated Date
Workaround
-
Advisories
https://codeberg.org/inetutils/inetutils/commit/ccba9f748aa8d50a38d7748e2e60362edd6a32ccPatch
https://codeberg.org/inetutils/inetutils/commit/fd702c02497b2f398e739e3119bed0b23dd7aa7bPatch
https://lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.htmlMitigation
https://www.gnu.org/software/inetutils/Product
https://www.openwall.com/lists/oss-security/2026/01/20/2Mailing List
https://www.openwall.com/lists/oss-security/2026/01/20/8Mailing List
https://www.vicarius.io/vsociety/posts/cve-2026-24061-detection-script-remote-authentication-bypass-in-gnu-inetutils-packageThird Party Advisory
https://www.vicarius.io/vsociety/posts/cve-2026-24061-mitigation-script-remote-authentication-bypass-in-gnu-inetutils-packageMitigation
http://www.openwall.com/lists/oss-security/2026/01/22/1Mailing List
https://lists.debian.org/debian-lts-announce/2026/01/msg00025.htmlMailing List
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24061US Government Resource
https://www.labs.greynoise.io/grimoire/2026-01-22-f-around-and-find-out-18-hours-of-unsolicited-houseguests/index.htmlExploit
https://www.openwall.com/lists/oss-security/2026/01/20/2#:~:text=root@...a%3A~%20USER='Mailing List

Analysis#

Affected Component
Analysis
inetutils
Patched

Vulnerability Ratings#

9.8
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
inetutils
yocto
master
2.7
Patched
inetutils
yocto
scarthgap
2.5
Patched

Resolved with patches#

inetutils (yocto:kirkstone)

#
Title
Author
Resolve
1
telnetd: Sanitize all variable expansions
Simon Josefsson <simon@josefsson.org>
CVE-2026-24061
2
Fix injection bug with bogus user names
Paul Eggert <eggert@cs.ucla.edu>
CVE-2026-24061

inetutils (yocto:master)

#
Title
Author
Resolve
1
telnetd: Sanitize all variable expansions
Simon Josefsson <simon@josefsson.org>
CVE-2026-24061
2
Fix injection bug with bogus user names
Paul Eggert <eggert@cs.ucla.edu>
CVE-2026-24061

inetutils (yocto:scarthgap)

#
Title
Author
Resolve
1
Fix injection bug with bogus user names
Paul Eggert <eggert@cs.ucla.edu>
CVE-2026-24061
2
telnetd: Sanitize all variable expansions
Simon Josefsson <simon@josefsson.org>
CVE-2026-24061