Critical Privilege Escalation Vulnerability in sudo Package
Summary
ALSA-2026:10758: Important: sudo security update. Affects sudo versions < 1.9.15-10.p5.el10_1. Fixed in 1.9.15-10.p5.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute commands with elevated privileges without needing to log in as the root user. This functionality is crucial for system management, enabling controlled access to sensitive commands while maintaining system security. However, vulnerabilities in sudo can pose significant risks, as they may allow unauthorized users to gain elevated privileges, compromising the integrity and security of the system.
Vulnerability Detail
The vulnerability identified as CVE-2026-35535 in the sudo package arises from a failure in privilege drop calls. This flaw can lead to privilege escalation, allowing an attacker to execute commands with higher privileges than intended. The implications of this vulnerability are severe, as it can enable unauthorized access to critical system functions, potentially leading to system compromise and data breaches. It is essential for users and administrators to understand the risks associated with this vulnerability and take appropriate measures to mitigate them.
How To Fix
Minimum fixed version
1.9.15-10.p5.el10_1
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can limit the use of sudo to trusted users only and monitor sudo logs for any suspicious activity until the package is updated. However, this is not a permanent solution and should not replace the necessary updates.
Conclusion
The CVE-2026-35535 vulnerability in the sudo package poses a significant risk of privilege escalation, allowing unauthorized users to execute commands with elevated privileges. It is crucial for system administrators to update to the patched version to secure their systems. Utilizing tools like Vulert can help monitor and identify vulnerabilities in real-time, ensuring better security management.
See every vulnerability recorded for sudo →
FAQ
CVE-2026-35535 is a privilege escalation vulnerability in the sudo package that allows unauthorized users to execute commands with elevated privileges due to a failure in privilege drop calls.
You can check if your system is affected by using the Vulert platform, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to analyze your application without needing to sign up.
The risks include unauthorized access to system functions, potential data breaches, and overall compromise of system integrity, which can lead to severe security incidents.
Yes, a patch is available. Users should update to version 1.9.15-10.p5.el10_1 of the sudo package to mitigate the vulnerability.
If immediate updating is not possible, limit sudo access to trusted users and monitor logs for any unusual activity as a temporary measure.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
