VULNERABILITY INTELLIGENCE
CVE-2025-32463
CVSS score9.3 CRITICAL
EPSS probability55.50%
CISA KEVKnown exploited vulnerability
Published2025-06-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Known Exploited Vulnerability
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Vendor / product: Sudo / Sudo
Description
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Weakness classification
- cve@mitre.org: CWE-829
Primary references
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Issue Tracking, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Exploit, Third Party Advisory
- cve@mitre.org — Exploit, Third Party Advisory
- cve@mitre.org — Release Notes
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Third Party Advisory