Critical Security Update for Sudo Package: Bypass of Time-Based Authorization
Summary
ALSA-2026:75579: Important: sudo security update. Affects sudo versions < 1.9.17-10.p2.el10_2.7. Fixed in 1.9.17-10.p2.el10_2.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute privileged commands without needing to log in as the root user. This functionality is crucial for system management, enabling controlled access to administrative tasks. However, vulnerabilities in sudo can pose significant security risks, potentially allowing unauthorized access to sensitive system functions.
Vulnerability Detail
The vulnerability identified as CVE-2026-96512 allows an attacker to bypass time-based authorization checks by exploiting the TZ environment variable. This means that users could execute privileged commands outside the intended time restrictions, leading to unauthorized access and potential system compromise. The flaw originates from improper handling of the TZ variable, which can be manipulated to affect the behavior of time-based restrictions.
How To Fix
Minimum fixed version
1.9.17-10.p2.el10_2.7
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, system administrators can restrict the use of the TZ environment variable for users who have access to sudo. This can be done by modifying the sudoers file to unset the TZ variable for specific users or groups, thereby preventing the bypass of time-based authorization.
Conclusion
The sudo vulnerability CVE-2026-96512 presents a significant risk by allowing unauthorized access through time-based authorization bypass. It is crucial for system administrators to update to the latest patched version of sudo to protect their systems. Implementing workarounds can provide temporary relief until the update is applied.
See every vulnerability recorded for sudo →
FAQ
The impact includes unauthorized execution of privileged commands, potentially compromising system integrity and security.
You can use Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Consider implementing workarounds, such as restricting the TZ environment variable for users with sudo access, until you can apply the update.
Yes, the vulnerability affects versions prior to 1.9.17-10.p2.el10_2.7. Updating to this version or later is necessary to mitigate the risk.
For detailed information, refer to the CVE page associated with CVE-2026-96512, which includes technical details and acknowledgments.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
