Re: [Bug Report] GNU inetutils telnetd Local Privilege Escalation

Collin Funk <[email protected]> Wed, 04 Mar 2026 13:16:31 -0800

Newsgroups	gmane.comp.gnu.inetutils.bugs
Message-ID	<[email protected]>

"Labs, STAR" <[email protected]> writes:

> our team member, Shi Weiming, would like to report the following bug in GNU
> inetutils telnetd.
>
> # GNU inetutils telnetd Local Privilege Escalation via GCONV_PATH
> Environment Variable Injection

This appears to be a duplicate of the issue mentioned by Justin Swartz [1].

Collin

[1] https://lists.gnu.org/archive/html/bug-inetutils/2026-02/msg00017.html