A kiosk mode bypass vulnerability has been discovered in Ariane Systems’ self-check-in systems which are installed in thousands of hotels globally and are at risk of exposing guests’ personal information and room keys. Pentagrid security researcher Martin Schobert found that by entering a single quotation character on the reservation look-up screen, the terminal allows the user to close the check-in system, giving them access to the underlying Windows desktop containing customer details. Despite multiple attempts to alert Ariane Systems, Schobert received no substantial response regarding a firmware fix. The vulnerable terminals, used by 3,000 hotels across twenty-five (25) countries, could allow unauthorized access to personal information and the creation of room keys for other rooms. Hotel operators are advised to isolate these terminals from critical systems and contact the vendor to ensure they are using a secure version. CTIX analysts recommend using defense-in-depth when staying at hotels. Guests should not rely solely on their room key lock, implementing physical secondary locking mechanisms like door stops and wedges, and locking up valuables in secure storage when they leave their rooms.