💣Exploit CVE-2025-29906 - Finit TTY Authentication Bypass Vulnerability

[Mental_Outlaw]

CVE ID : CVE-2025-29906
Published : April 29, 2025, 11:16 p.m. | 20 hours, 28 minutes ago
Description : Finit is a fast init for Linux systems. Versions starting from 3.0-rc1 and prior to version 4.11 bundle an implementation of getty for the `tty` configuration directive that can bypass `/bin/login`, i.e., a user can log in as any user without authentication. This issue has been patched in version 4.11.
Severity: 8.6 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.