Critical Privilege Escalation Vulnerability in sudo Package - CVE-2026-35535
Summary
ALSA-2026:19220: Important: sudo security update. Affects sudo versions < 1.9.17p2-3.el9_8. Fixed in 1.9.17p2-3.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute privileged commands without needing to log in as the root user. This functionality is crucial for system management, enabling controlled access to administrative tasks while maintaining system security. However, vulnerabilities in sudo can pose significant risks, as they may allow unauthorized users to gain elevated privileges, potentially compromising the entire system.
Vulnerability Detail
The vulnerability identified as CVE-2026-35535 is a critical privilege escalation issue caused by a failure in the privilege drop calls within the sudo utility. This flaw allows an attacker to exploit the sudo command to gain unauthorized access to root privileges, which can lead to complete system compromise. The vulnerability arises from improper handling of user permissions during the execution of commands, making it essential for system administrators to address this issue promptly.
How To Fix
Minimum fixed version
1.9.17p2-3.el9_8
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can restrict the use of the sudo command for affected users until the package is updated. This can be done by modifying the sudoers file using the command 'sudo visudo' and commenting out or removing the specific user entries that require elevated privileges.
Conclusion
The sudo package vulnerability CVE-2026-35535 poses a significant risk of privilege escalation, allowing unauthorized access to root privileges. It is crucial for system administrators to update the package to the latest version to mitigate this risk. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for sudo →
FAQ
CVE-2026-35535 is a critical vulnerability in the sudo package that allows privilege escalation due to a failure in privilege drop calls.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If exploited, this vulnerability can allow unauthorized users to gain root access, leading to potential system compromise and data breaches.
Yes, the patched version of the sudo package is 1.9.17p2-3.el9_8. Updating to this version will fix the vulnerability.
As a temporary measure, restrict the use of the sudo command for affected users until the package can be updated.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
