
CVE-2026-24061 - GNU InetUtils telnetd authentication bypass POC + Docker lab environment for testing
⚠️ WARNING: Intentionally vulnerable environment. Do NOT expose to untrusted networks.
Vulnerable GNU InetUtils telnetd (v2.5) for testing CVE-2026-24061 - authentication bypass via argument injection.
# Build
sudo docker compose up -d
# Test connection
telnet 127.0.0.1
#exploitation
python3 exploit.py 127.0.0.1
| User | Password |
|---|
| testuser | password |
| root | toor |
| Field | Value |
|---|---|
| CVE | CVE-2026-24061 |
| Affected | GNU InetUtils telnetd ≤ 2.7 |
| Type | Authentication Bypass (CWE-88) |
| Impact | Remote root access |