Exploitation Summary
EIP tracks 6 public exploits for CVE-2026-28372. PoCs published by XiaomingX, exploitintel, Rohitberiwala.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2026-28372, which leverages environment variable injection (CREDENTIALS_DIRECTORY) and a crafted login.noauth file to bypass authentication in GNU inetutils telnetd, leading to local privilege escalation to root.
Description
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALS_DIRECTORY environment variable, and requires an unprivileged local user to create a login.noauth file.
Exploits (6)
This repository contains a functional exploit for CVE-2026-28372, which leverages environment variable injection (CREDENTIALS_DIRECTORY) and a crafted login.noauth file to bypass authentication in GNU inetutils telnetd, leading to local privilege escalation to root.
This repository contains a functional exploit for CVE-2026-28372, a local privilege escalation vulnerability in GNU inetutils telnetd < 2.7. The exploit leverages the Telnet NEW_ENVIRON option to inject the CREDENTIALS_DIRECTORY environment variable, bypassing authentication in util-linux login(1) >= 2.40.
The repository contains a functional exploit for CVE-2026-28372, a local privilege escalation vulnerability in GNU inetutils telnetd. The exploit manipulates the CREDENTIALS_DIRECTORY environment variable to bypass authentication via a login.noauth file, granting root access.
The repository contains a functional exploit for CVE-2026-28372, a local privilege escalation vulnerability in GNU inetutils telnetd. The exploit manipulates the CREDENTIALS_DIRECTORY environment variable to bypass authentication and obtain a root shell.
The repository contains a functional Python exploit for CVE-2026-28372, which leverages environment variable injection (CREDENTIALS_DIRECTORY) and a crafted login.noauth file to bypass authentication in GNU inetutils telnetd, leading to local privilege escalation to root.
This repository contains a functional Python exploit for CVE-2026-28372, which leverages environment variable injection (CREDENTIALS_DIRECTORY) and a crafted login.noauth file to bypass authentication in GNU inetutils telnetd, leading to local privilege escalation to root.
References (9)
Related Analysis
Scores
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
