Critical Security Flaw in Sudo Package: Policy Bypass Vulnerability
Summary
ALSA-2026:69123: Important: sudo security update. Affects sudo versions < 1.9.17p2-3.el9_8.1. Fixed in 1.9.17p2-3.el9_8.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute privileged commands without needing to log in as the root user. This functionality is crucial for system management and security, as it enables controlled access to administrative tasks. However, vulnerabilities in sudo can pose significant risks, as they may allow unauthorized users to execute commands that should be restricted.
Vulnerability Detail
The vulnerability identified as CVE-2026-82474 is a policy bypass issue that allows unauthorized program execution via the execveat system call. This flaw could enable an attacker to execute arbitrary commands with elevated privileges, undermining the security model of the system. The implications of this vulnerability are severe, as it could lead to unauthorized access and control over the affected system.
How To Fix
Minimum fixed version
1.9.17p2-3.el9_8.1
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can restrict access to the sudo command for untrusted users until the package is updated. This can be done by modifying the sudoers file to limit which users can execute commands with sudo.
Conclusion
The sudo package vulnerability CVE-2026-82474 poses a significant risk to system security by allowing unauthorized command execution. It is crucial to update to the patched version to mitigate this risk. Users should also consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for sudo →
FAQ
CVE-2026-82474 is a policy bypass vulnerability in the sudo package that allows unauthorized program execution, potentially leading to privilege escalation.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The risks include unauthorized access to system commands, which can lead to data breaches, system compromise, and loss of control over the affected systems.
Yes, a patch is available in version 1.9.17p2-3.el9_8.1 of the sudo package. It is recommended to update to this version immediately.
If immediate updates are not possible, consider restricting access to the sudo command for untrusted users as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
