Critical Vulnerability in Sudo Package: Time-Based Authorization Bypass
Summary
RLSA-2026:75579: Important: sudo security update. Affects sudo versions < 0:1.9.17-10.p2.el10_2.7. Fixed in 0:1.9.17-10.p2.el10_2.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute privileged commands without needing to log in as the root user. This functionality is essential for managing system permissions and enhancing security by limiting root access. However, vulnerabilities in Sudo can pose significant risks, as they may allow unauthorized access to sensitive system functions.
Vulnerability Detail
The vulnerability identified as CVE-2026-96512 allows an attacker to bypass the NOTBEFORE/NOTAFTER time-based authorization controls by manipulating the TZ environment variable. This could enable unauthorized users to execute commands that should be restricted based on time constraints, potentially leading to unauthorized access and system compromise. The CVSS score for this vulnerability is 7.8, indicating a high severity level.
How To Fix
Minimum fixed version
0:1.9.17-10.p2.el10_2.7
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can unset the TZ environment variable for users who do not require it. This can be done by adding the following line to the user's shell configuration file (e.g., .bashrc or .bash_profile):
unset TZ
This will prevent the variable from being used to bypass time-based restrictions until the package can be updated.
Conclusion
The Sudo package vulnerability CVE-2026-96512 poses a significant risk by allowing unauthorized command execution through time-based authorization bypass. It is crucial for system administrators to update their Sudo packages to the latest version to mitigate this risk. Temporary workarounds are available, but they should not replace proper patching.
See every vulnerability recorded for sudo →
FAQ
The impact includes the potential for unauthorized command execution by bypassing time-based restrictions, which could lead to system compromise.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If immediate updates are not possible, consider unsetting the TZ environment variable as a temporary workaround to mitigate the risk.
Yes, the vulnerability affects versions of Sudo prior to 1.9.17-10.p2.el10_2.7. Updating to this version or later is crucial.
For more details, refer to the CVE page associated with CVE-2026-96512, which provides in-depth information about the vulnerability and its implications.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
