File Discovery Vulnerability in sudo-rs: Low Privilege Users Can Access Inaccessible Files
Summary
CVE-2025-46717: sudo-rs Allows Low Privilege Users to Discover the Existence of Files in Inaccessible Folders. Affects sudo-rs versions < 0.2.6. Fixed in 0.2.6. How to fix ↓
Also tracked for
- rust-sudo-rs · Debian:13
The same CVE-2025-46717 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
sudo-rs is a Rust implementation of the sudo command, which allows users to run programs with the security privileges of another user, typically the superuser. It is designed to provide a secure way to grant limited administrative privileges to users. However, a vulnerability exists that allows users with minimal sudo rights to determine the existence of files in directories they cannot access, potentially exposing sensitive information.
Vulnerability Detail
The vulnerability arises from the way sudo-rs handles file existence checks. Users with limited or no sudo privileges can use the command 'sudo --list <pathname>' to check for the existence of files in restricted directories. This can lead to information disclosure, as users can infer the presence of sensitive files based on the command's output. For example, if a user queries a nonexistent file, they receive a 'command not found' message, while querying an existing file results in a permission error. This behavior can be exploited to gather information about files that should remain hidden.
How To Fix
Latest published version: 0.2.15 as of 23 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.2.6
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider restricting access to sensitive directories and files through proper file permissions. Ensure that users without necessary privileges cannot even attempt to check for file existence.
Conclusion
The sudo-rs package has a vulnerability that allows low privilege users to discover the existence of files in inaccessible folders. It is crucial to update to the latest version to mitigate this risk and protect sensitive information. Additionally, implementing strict file permissions can help reduce exposure.
See every vulnerability recorded for sudo-rs →
FAQ
The CVSS score of this vulnerability is 3.3, indicating a low severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The main risk is the exposure of sensitive file names, which could be leveraged in further attacks or to gain unauthorized access to information.
Yes, you can mitigate the risk by ensuring that sensitive files and directories have strict permissions that prevent unauthorized users from accessing them.
This issue was identified by Marc Schoolderman, a developer of sudo-rs.
Related vulnerabilities
Recent vulnerabilities recorded for sudo-rs.
