CVE-2026-32772

Medium

Published: —Translated: 09/06/2026(UTC)NVD NIST

Summary

A vulnerability in telnet in GNU inetutils through version 2.7 allows servers to read arbitrary environment variables from clients via the NEW_ENVIRON SEND USERVAR command.

Risk Assessment

An attacker could gain access to sensitive information stored in environment variables, potentially leading to further attacks on the system.

Recommendation

It is recommended to upgrade to the latest version of GNU inetutils to mitigate this vulnerability.

Original NVD description (English source)

telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.