Critical Privilege Escalation Vulnerability in sudo Package
Summary
ALSA-2026:12310: Important: sudo security update. Affects sudo versions < 1.9.5p2-15.el9_7. Fixed in 1.9.5p2-15.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute commands with elevated privileges, without requiring them to log in as the root user. This functionality is crucial for system management, enabling controlled access to sensitive operations. However, vulnerabilities in sudo can lead to significant security risks, including unauthorized access and privilege escalation.
Vulnerability Detail
The vulnerability identified as CVE-2026-35535 arises from a failure in the privilege drop calls within the sudo utility. This flaw allows an attacker to escalate their privileges, potentially gaining unauthorized access to system resources and sensitive data. The implications of this vulnerability are severe, as it undermines the core security model of user privilege separation, allowing malicious users to execute commands with root-level access.
How To Fix
Minimum fixed version
1.9.5p2-15.el9_7
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can limit the use of sudo for affected users until the package is updated. This can be done by modifying the sudoers file to restrict access to specific commands or users.
Conclusion
The sudo vulnerability CVE-2026-35535 poses a significant risk of privilege escalation, allowing unauthorized access to system resources. It is crucial for users to update their sudo package to the latest version to mitigate this risk. Utilizing tools like Vulert can help in monitoring and managing open-source vulnerabilities effectively.
See every vulnerability recorded for sudo →
FAQ
The vulnerability allows for privilege escalation due to a failure in privilege drop calls, enabling unauthorized users to execute commands with elevated privileges.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
If exploited, this vulnerability can allow attackers to gain root access to the system, compromising sensitive data and system integrity.
Yes, a patch is available in the form of an updated sudo package. Users should update to version 1.9.5p2-15.el9_7 or later.
As a temporary measure, restrict sudo access for affected users and monitor system logs for any suspicious activity until the package can be updated.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
