Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros

post,

Cybersecurity researchers have disclosed two security flaws in the Sudo command-line utility for Linux and Unix-like operating systems that could enable local attackers to escalate their privileges to root on susceptible machines.

A brief description of the vulnerabilities is below –

  • CVE-2025-32462 (CVSS score: 2.8) – Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines
  • CVE-2025-32463 (CVSS score: 9.3) – Sudo before 1.9.17p1 allows local users to obtain root access because “/etc/nsswitch.conf” from a user-controlled directory is used with the –chroot option
Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros: Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros
vulnerability