Incorrect authorization in Sudo
Priority MEDIUM 45CWE-863Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-863.
Summary
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.04477 91st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Sudo (Sudo project): 1.9.17p1Red Hat: 17 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Sudo project | Sudo | 1.8.8 to before 1.9.17p1 | 1.9.17p1 | Patch available | CNA |
- Sudo VendorSudo project Affected 1.8.8 to before 1.9.17p1 Fixed in 1.9.17p1 Patch available CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:* | before 1.9.17 | Vulnerable | Sudo project |
| cpe:2.3:a:sudo_project:sudo:1.9.17:-:*:*:*:*:*:* | 1.9.17 | Vulnerable | Sudo project |
- cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:* Versions before 1.9.17 Vulnerable ·Sudo project
- cpe:2.3:a:sudo_project:sudo:1.9.17:-:*:*:*:*:*:* Versions 1.9.17 Vulnerable ·Sudo project
Remediation
- Fix · CNA Sudo (Sudo project) Fixed in 1.9.17p1
Red Hat 17 advisories
- RHSA-2025:15672 Released 2025-09-18 · Red Hat rating ImportantOpenShift Container Platform 4.13.60 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202509030117-0
- RHSA-2025:13289 Released 2025-08-14 · Red Hat rating ImportantOpenShift Container Platform 4.14.55 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-agent-installer-csr-approver-rhel8, openshift4/ose-agent-installer-node-agent-rhel9 +4
- RHSA-2025:12323 Released 2025-08-07 · Red Hat rating ImportantOpenShift Container Platform 4.12.79 bug fix and security update
- Red Hat OpenShift Container Platform 4.12 openshift4/ose-cluster-image-registry-operator, rhcos
Show 14 more Red Hat advisories
- RHSA-2025:11537 Released 2025-07-22 · Red Hat rating Importantsudo security update
- Red Hat Enterprise Linux AppStream (v. 10) sudo-python-plugin-1.9.15-8.p5.el10_0.2
- Red Hat Enterprise Linux BaseOS (v. 10) sudo-1.9.15-8.p5.el10_0.2
- RHSA-2025:10781 Released 2025-07-17 · Red Hat rating ImportantOpenShift Container Platform 4.16.44 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
- RHSA-2025:10767 Released 2025-07-17 · Red Hat rating ImportantOpenShift Container Platform 4.18.20 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/azure-service-rhel9-operator +47
- RHSA-2025:10771 Released 2025-07-16 · Red Hat rating ImportantOpenShift Container Platform 4.19.4 bug fix and security update
- Red Hat OpenShift Container Platform 4.19 openshift4/ose-oauth-apiserver-rhel9, rhcos
- RHSA-2025:10871 Released 2025-07-14 · Red Hat rating Importantsudo security update
- Red Hat Enterprise Linux Server (v. 7 ELS) sudo-1.8.23-10.el7_9.4
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) sudo-devel-1.8.23-10.el7_9.4, sudo-devel-1.8.23-10.el7_9.4.ppc
- RHSA-2025:10836 Released 2025-07-14 · Red Hat rating Importantsudo security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) sudo-1.9.5p2-1.el8_8.1
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) sudo-1.9.5p2-1.el8_8.1
- RHSA-2025:10835 Released 2025-07-14 · Red Hat rating Importantsudo security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) sudo-python-plugin-1.9.5p2-7.el9_0.5
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) sudo-1.9.5p2-7.el9_0.5
- RHSA-2025:10779 Released 2025-07-10 · Red Hat rating Importantsudo security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) sudo-python-plugin-1.9.5p2-9.el9_2.3
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) sudo-1.9.5p2-9.el9_2.3
- RHSA-2025:10707 Released 2025-07-09 · Red Hat rating Importantsudo security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) sudo-python-plugin-1.9.5p2-10.el9_4.1
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) sudo-1.9.5p2-10.el9_4.1
- RHSA-2025:10520 Released 2025-07-07 · Red Hat rating Importantsudo security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) sudo-1.9.5p2-1.el8_6.1
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) sudo-1.9.5p2-1.el8_6.1
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) sudo-1.9.5p2-1.el8_6.1
- RHSA-2025:10518 Released 2025-07-07 · Red Hat rating Importantsudo security update
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) sudo-1.8.29-5.el8_2.3
- RHSA-2025:10383 Released 2025-07-07 · Red Hat rating Importantsudo security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) sudo-1.8.29-7.el8_4.3
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) sudo-1.8.29-7.el8_4.3
- RHSA-2025:10110 Released 2025-07-01 · Red Hat rating Importantsudo security update
- Red Hat Enterprise Linux BaseOS (v. 8) sudo-1.9.5p2-1.el8_10.1
- RHSA-2025:9978 Released 2025-06-30 · Red Hat rating Importantsudo security update
- Red Hat Enterprise Linux AppStream (v. 9) sudo-python-plugin-1.9.5p2-10.el9_6.1
- Red Hat Enterprise Linux BaseOS (v. 9) sudo-1.9.5p2-10.el9_6.1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Sudo 1.9.17p1
2 records Highest priority Priority CRITICAL 1 CRITICAL, 1 MEDIUM
Other records, highest priority first
- TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf…Priority CRITICAL 99
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2025:11537 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2025:9978 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2025:10835 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2025:10779 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2025:10707 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2025:11537 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2025:10110 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2025:9978 |
| Red Hat Enterprise Linux BaseOS AUS (v. 8.2) | Fixed | RHSA-2025:10518 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.4) | Fixed | RHSA-2025:10383 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2025:10520 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.6) | Fixed | RHSA-2025:10520 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.8) | Fixed | RHSA-2025:10836 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.0) | Fixed | RHSA-2025:10835 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.2) | Fixed | RHSA-2025:10779 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.4) | Fixed | RHSA-2025:10707 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | Fixed | RHSA-2025:10383 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.6) | Fixed | RHSA-2025:10520 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.8) | Fixed | RHSA-2025:10836 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2025:10871 |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Fixed | RHSA-2025:10871 |
| Red Hat OpenShift Container Platform 4.12 | Fixed | RHSA-2025:12323 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2025:15672 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2025:13289 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2025:12370 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2025:10781 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2025:12437 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2025:10767 |
| Red Hat OpenShift Container Platform 4.19 | Fixed | RHSA-2025:10771 |
Not affected: 8 products
- Red Hat Enterprise Linux 6
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
- Red Hat OpenShift Container Platform 4.18
- Red Hat OpenShift Container Platform 4.19
Timeline
- 2026-10-02 Threatist record created from CVE-2025-32462
- 2026-10-03 Alias added: GHSA-c5x2-97hm-x895
- 2026-10-15 Affected versions changed · Red Hat
References
Advisory 3
Other 9
- https://www.sudo.ws/releases/changelog/
- https://ubuntu.com/security/notices/USN-7604-1
- https://www.sudo.ws/security/advisories/host_any/
- https://lists.debian.org/debian-security-announce/2025/msg00118.html
- https://explore.alas.aws.amazon.com/CVE-2025-32462.html
- https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32462
- https://security-tracker.debian.org/tracker/CVE-2025-32462
- https://www.suse.com/security/cve/CVE-2025-32462.html
- https://access.redhat.com/security/cve/cve-2025-32462
More Sudo project Sudo vulnerabilities
- TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
- TI-2021-02242 Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer… KEVCVSS 3.1HIGH 7.8
- TI-2019-10640 In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass… CVSS 3.1HIGH 8.8
- TI-2023-08978 In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed… CVSS 3.1HIGH 7.8
- TI-2019-13477 In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a… CVSS 3.1HIGH 7.8
- TI-2023-06485 Sudo: improper handling of ipa_hostname leads to privilege mismanagement CVSS 3.1HIGH 8.8
Sources
- CVE-2025-32462 · CVE Program
- CVE-2025-32462 · NVD
- FIRST EPSS
- GHSA-c5x2-97hm-x895 · GitHub Advisory Database · CC BY 4.0
- CVE-2025-32462 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences