VULNERABILITY INTELLIGENCE
CVE-2026-82474
CVSS score7.8 HIGH
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-08-29
Last modified2026-09-10
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.
Weakness classification
- disclosure@vulncheck.com: CWE-693