CVE-2025-29906
CVSS 3.1 Score 8.6 of 10 (high)
Details
Published Apr 29, 2025
Updated: May 2, 2025
CWE ID 287
Summary
CVE-2025-29906 is a vulnerability affecting Finit, a fast init system for Linux. In versions prior to 4.11, getty implementation for the `tty` configuration directive fails to properly authenticate user login. This issue enables unauthorized users to bypass the `/bin/login` authentication, potentially granting them access to any user account. This vulnerability has been addressed in version 4.11.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Finit