Critical Privilege Escalation Vulnerability in Sudo Package
Summary
RLSA-2026:11521: Important: sudo security update. Affects sudo versions < 0:1.9.5p2-1.el8_10.5. Fixed in 0:1.9.5p2-1.el8_10.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute privileged commands without needing to log in as the root user. This functionality is crucial for system management and security, as it enables controlled access to administrative tasks. However, vulnerabilities in Sudo can pose significant risks, potentially allowing unauthorized users to gain elevated privileges and compromise system integrity.
Vulnerability Detail
The vulnerability identified as CVE-2026-35535 in the Sudo package stems from a failure in privilege drop calls. This flaw can be exploited by attackers to escalate their privileges, gaining unauthorized access to sensitive system functions and data. The ramifications of this vulnerability are severe, as it can lead to complete system compromise, allowing attackers to execute arbitrary commands with elevated privileges. The technical details indicate that the issue arises during the process of dropping privileges, which is a critical security measure intended to limit the access of users executing commands with elevated rights.
How To Fix
Minimum fixed version
0:1.9.5p2-1.el8_10.5
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can limit the use of Sudo for affected users until the package is updated. This can be done by modifying the sudoers file to restrict access to specific commands or users. However, this is not a permanent solution and should be followed by an update as soon as possible.
Conclusion
The identified vulnerability in the Sudo package poses a significant risk due to its potential for privilege escalation. It is crucial for system administrators to update to the patched version promptly to safeguard their systems. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time, ensuring ongoing security.
See every vulnerability recorded for sudo →
FAQ
The CVSS score for this vulnerability is 7.4, indicating a high severity level.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By uploading a manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
The potential impacts include unauthorized privilege escalation, which can lead to complete system compromise and unauthorized access to sensitive data.
Yes, temporarily restricting the use of Sudo for affected users can mitigate the risk until the patch is applied.
More information can be found on the CVE page for CVE-2026-35535, which provides detailed insights into the vulnerability and its implications.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
