Critical Local Privilege Escalation Vulnerability in Sudo Package
Summary
ALSA-2025:10110: Important: sudo security update. Affects sudo versions < 1.9.5p2-1.el8_10.1. Fixed in 1.9.5p2-1.el8_10.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute privileged commands without needing to log in as the root user. This functionality is essential for system management and security, as it enables controlled access to administrative capabilities. However, vulnerabilities in sudo can pose significant risks, as they may allow unauthorized users to gain elevated privileges, potentially compromising the entire system.
Vulnerability Detail
The vulnerability identified as CVE-2025-32462 allows for local privilege escalation (LPE) through a host option in the sudo configuration. This issue arises when certain configurations are improperly set, enabling an attacker with limited access to exploit the flaw and execute commands with elevated privileges. The ramifications of this vulnerability can be severe, as it may lead to unauthorized access to sensitive data, system manipulation, or complete system takeover.
How To Fix
Minimum fixed version
1.9.5p2-1.el8_10.1
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can review and modify the sudo configuration to restrict the use of the host option or limit access to the sudo command for affected users until the package can be updated.
Conclusion
The sudo package vulnerability CVE-2025-32462 poses a significant risk of local privilege escalation. It is crucial for system administrators to update to the latest patched version to mitigate potential threats. Utilizing tools like Vulert can enhance your ability to monitor and manage vulnerabilities effectively.
See every vulnerability recorded for sudo →
FAQ
CVE-2025-32462 allows unauthorized users to escalate their privileges, potentially leading to system compromise.
You can use Vulert's playground at Vulert Scanner to check if your application is affected without needing to sign up.
Consider modifying the sudo configuration to limit access to the sudo command or restrict the use of the host option as a temporary measure.
Yes, updating to version 1.9.5p2-1.el8_10.1 or later will address the vulnerability.
Vulert monitors and alerts for open-source vulnerabilities in your software using a manifest file, providing real-time insights into potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
