CVE-2025-32462

PoC —

CVSS 3.1

8.8 high

EPSS

4%p91

Published

Jun 30, 2025 (Jun 30, 2025)

Modified

Jul 14, 2026

Description

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Vendors: sudo project
Products: sudo
Weakness: CWE-863
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news6 stories

Sudo local privilege escalation vulnerabilities fixed (CVE-2025-32462, CVE-2025-32463)

Help Net SecuritySep 30, 09:28 UTC · Sep 30, 2025Vulnerability in the wildCVE-2025-32462 CVE-2025-32463

U.S. CISA adds Adminer, Cisco IOS, Fortra GoAnywhere MFT, Libraesva ESG, and Sudo flaws to its Known Exploited Vulnerabilities catalog

Security AffairsSep 30, 09:07 UTC · Sep 30, 2025Exploit / PoC in the wildCVE-2021-21311 CVE-2025-20352 CVE-2025-10035+3 CVEs

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-20309+23 CVEs

Week in review: Sudo local privilege escalation flaws fixed, Google patches actively exploited Chrome

Help Net SecurityJul 6, 00:00 UTC · Jul 6, 2025Vulnerability in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-6554+4 CVEs

Critical Sudo bugs expose major Linux distros to local Root exploits

Security AffairsJul 4, 21:01 UTC · Jul 4, 2025Vulnerability CVE-2025-32462 CVE-2025-32463

Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros

The Hacker NewsJul 4, 12:49 UTC · Jul 4, 2025Vulnerability CVE-2025-32462 CVE-2025-32463