Critical Vulnerability in Sudo Package: TZ Environment Variable Bypass
Summary
RLSA-2026:75580: Important: sudo security update. Affects sudo versions < 0:1.9.5p2-2.el8_10. Fixed in 0:1.9.5p2-2.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute privileged commands without logging in as the root user. This functionality is crucial for system management and security, enabling controlled access to administrative tasks. However, the Sudo package is susceptible to vulnerabilities that can compromise system integrity and security.
Vulnerability Detail
The vulnerability identified as CVE-2026-96512 allows an attacker to bypass time-based authorization checks by manipulating the TZ environment variable. This could enable unauthorized users to execute commands that should be restricted based on time constraints, potentially leading to unauthorized access and control over the system. The ramifications of this vulnerability are significant, as it undermines the security model of the Sudo utility, which is designed to limit access to privileged commands.
How To Fix
Minimum fixed version
0:1.9.5p2-2.el8_10
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the TZ environment variable in their Sudo configurations until the package is updated. This can help mitigate the risk of exploitation until a proper fix is applied.
Conclusion
The vulnerability in the Sudo package, identified as CVE-2026-96512, poses a significant risk by allowing unauthorized access through the manipulation of the TZ environment variable. It is crucial to update to the patched version to mitigate this risk and maintain system security. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for sudo →
FAQ
The CVSS score of this vulnerability is 7.8, indicating a high level of severity.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application against this vulnerability using the Vulert playground without any signup.
If exploited, this vulnerability could allow unauthorized users to execute privileged commands, leading to potential system compromise and data breaches.
Yes, versions prior to 0:1.9.5p2-2.el8_10 are vulnerable to this issue.
If immediate updates are not possible, consider implementing the workaround of avoiding the TZ environment variable in your Sudo configurations.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
