One of the internet's most popular free operating systems allowed attackers to bypass its authentication controls.