Critical Privilege Escalation Vulnerability in Sudo Package
Summary
ALSA-2026:11521: Important: sudo security update. Affects sudo versions < 1.9.5p2-1.el8_10.5. Fixed in 1.9.5p2-1.el8_10.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute commands with elevated privileges without needing to log in as the root user. This functionality is essential for system management, enabling controlled access to critical system commands while maintaining security. However, vulnerabilities in sudo can pose significant risks, potentially allowing unauthorized users to gain root access and compromise system integrity.
Vulnerability Detail
The vulnerability identified as CVE-2026-35535 arises from a failure in the privilege drop calls within the sudo utility. This flaw can lead to privilege escalation, where a user can execute commands with higher privileges than intended, potentially allowing them to gain unauthorized access to sensitive system areas or perform malicious actions. The implications of this vulnerability are severe, as it could lead to complete system compromise if exploited by an attacker.
How To Fix
Minimum fixed version
1.9.5p2-1.el8_10.5
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can restrict access to the sudo command for users who do not require it, thereby minimizing the risk of exploitation until the package can be updated. This can be done by modifying the sudoers file using the command 'visudo' and adjusting user permissions accordingly.
Conclusion
In summary, the sudo package has a critical vulnerability (CVE-2026-35535) that allows privilege escalation due to a failure in privilege drop calls. It is crucial for system administrators to update the package to the patched version to mitigate risks. Temporary workarounds can be employed until the update is applied.
See every vulnerability recorded for sudo →
FAQ
The impact of CVE-2026-35535 is significant, as it allows unauthorized users to escalate their privileges, potentially leading to full system compromise.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor for vulnerabilities without requiring installation.
If you cannot update sudo immediately, consider restricting access to the sudo command for users who do not need it as a temporary measure.
Yes, Vulert provides a solution that monitors open-source vulnerabilities in real-time using just a manifest file like package-lock.json.
Not addressing this vulnerability can lead to unauthorized access and control over your system, potentially resulting in data breaches or system integrity loss.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
