Critical Local Privilege Escalation Vulnerability in sudo Package
Summary
RLSA-2025:10110: Important: sudo security update. Affects sudo versions < 0:1.9.5p2-1.el8_10.1. Fixed in 0:1.9.5p2-1.el8_10.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sudo package is a widely used utility that allows system administrators to grant specific users the ability to execute commands with elevated privileges, without needing to log in as the root user. This functionality is essential for managing system tasks securely and efficiently. However, vulnerabilities in sudo can pose significant security risks, as they may allow unauthorized users to gain elevated access to system resources.
Vulnerability Detail
The vulnerability identified as CVE-2025-32462 allows for local privilege escalation (LPE) through a host option in the sudo configuration. This flaw can be exploited by an attacker with limited access to execute arbitrary commands with root privileges, potentially compromising the entire system. The severity of this vulnerability is underscored by its CVSS score of 7.0, indicating a high level of risk associated with its exploitation.
How To Fix
Minimum fixed version
0:1.9.5p2-1.el8_10.1
This is the first release that contains the fix.
sudo dnf update sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, system administrators can restrict the use of the sudo command for affected users until the package is updated. This can be done by modifying the sudoers file to limit access. Use the command 'sudo visudo' to edit the sudoers file and remove or comment out the lines granting sudo access to the affected users.
Conclusion
The sudo package vulnerability CVE-2025-32462 poses a serious risk of local privilege escalation, allowing unauthorized users to execute commands with elevated privileges. It is crucial to update the package to the fixed version to mitigate this risk. Administrators should also consider temporary workarounds to limit exposure until the update can be applied.
See every vulnerability recorded for sudo →
FAQ
CVE-2025-32462 is a vulnerability in the sudo package that allows local privilege escalation, enabling unauthorized users to execute commands with root privileges.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Exploitation of this vulnerability can lead to unauthorized access to sensitive system resources, potentially allowing attackers to compromise the entire system.
If immediate updates are not possible, consider restricting sudo access for affected users as a temporary workaround until the patch can be applied.
The CVSS score for this vulnerability is 7.0, indicating a high severity level and a significant risk to affected systems.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
