CVE-2025-32463

CRITICAL CVSS: 9.3 Published: 2025-06-30 Modified: 2026-06-17

Description

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Affected Platforms

Sudo Project SudoSuse Linux Enterprise Real TimeSuse Linux Enterprise Server For SapCanonical Ubuntu LinuxRedhat Enterprise LinuxDebian Debian LinuxSuse Linux Enterprise DesktopOpensuse Leap

Weakness Type

CWE-829

References

https://access.redhat.com/security/cve/cve-2025-32463
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463
https://explore.alas.aws.amazon.com/CVE-2025-32463.html
https://security-tracker.debian.org/tracker/CVE-2025-32463
https://ubuntu.com/security/notices/USN-7604-1
https://www.openwall.com/lists/oss-security/2025/06/30/3