CVE-2025-32463: Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
An attacker can leverage sudo's -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file. Sudo versions 1.9.14 to 1.9.17 inclusive are affected.
Other sources
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
— NVD
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.
— CISA
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32463?
CVE-2025-32463 is considered a critical vulnerability due to its potential to allow local users to gain root access.
How do I fix CVE-2025-32463?
To mitigate CVE-2025-32463, update Sudo to version 1.9.17p1 or later.
Which versions of Sudo are affected by CVE-2025-32463?
Sudo versions prior to 1.9.17p1 are affected by CVE-2025-32463.
Can CVE-2025-32463 be exploited remotely?
No, CVE-2025-32463 is a local privilege escalation vulnerability requiring local access to exploit.
What systems are impacted by CVE-2025-32463?
CVE-2025-32463 impacts systems using vulnerable versions of Sudo, particularly those utilizing the --chroot option.