CVE-2025-32463

Name of the Vulnerable Software and Affected Versions Sudo versions prior to 1.9.17p1

Description Local users can obtain root access and execute arbitrary code by exploiting the inclusion of functionality from an untrusted control sphere. The issue occurs when the --chroot (or -R) option is used, allowing an attacker to place a malicious nsswitch.conf configuration file within a user-controlled directory. This bypasses the permissions typically enforced by the sudoers file. This flaw has been reported as actively exploited in the wild.

Recommendations Update Sudo to version 1.9.17p1 or later. As a temporary containment measure, remove the SUID bit from /usr/bin/sudo to prevent privilege elevation.