Critical Security Flaw in Sudo Package: Policy Bypass Vulnerability
Summary
RLSA-2026:69123: Important: sudo security update. Affects sudo versions < 0:1.9.17p2-3.el9_8.1. Fixed in 0:1.9.17p2-3.el9_8.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute privileged commands without needing to log in as the root user. This functionality is essential for system management, enabling controlled access to administrative tasks while maintaining system security. However, vulnerabilities in sudo can pose significant risks, as they may allow unauthorized users to execute commands that should be restricted.
Vulnerability Detail
The vulnerability identified as CVE-2026-82474 is a policy bypass issue in the sudo utility. It allows unauthorized program execution via the execveat system call, potentially enabling attackers to execute commands with elevated privileges. This flaw can lead to unauthorized access and manipulation of system resources, compromising the integrity and security of the affected system. The CVSS score for this vulnerability is 7.8, indicating a high severity level.
How To Fix
Minimum fixed version
0:1.9.17p2-3.el9_8.1
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can limit the use of sudo for users who do not require it, thereby reducing the risk of exploitation until the package can be updated. Additionally, monitoring user activities and restricting access to sensitive commands can help mitigate potential threats.
Conclusion
The CVE-2026-82474 vulnerability in the sudo package poses a significant risk by allowing unauthorized command execution. It is crucial for system administrators to update to the latest patched version to mitigate this risk. Utilizing tools like Vulert can enhance your ability to monitor and manage open-source vulnerabilities effectively.
See every vulnerability recorded for sudo →
FAQ
The vulnerability allows unauthorized users to execute privileged commands, which can lead to system compromise and unauthorized access.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Consider implementing temporary workarounds such as limiting sudo access for users and monitoring command usage until the update can be applied.
Yes, Vulert offers real-time monitoring for open-source vulnerabilities using a manifest file like package-lock.json, allowing you to stay informed without manual checks.
The CVSS score for CVE-2026-82474 is 7.8, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
