CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Ransomware campaigns Not observed so far

Weakness CWE-829

Description

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Affected products and versions

Product	Affected versions	Fixed in
Sudo 1.9	1.9.14 → < 1.9.17p1	1.9.17p1

Other CVEs of Sudo

The 3 CVEs of Sudo →

CVE-2026-35535 In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop… 7.4 High CVE-2025-32462 Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL,… 2.8 Low