This vulnerability could allow a local attacker to leverage sudo's -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.
post
The vulnerability in question is CVE-2025-32463 (CVSS score: 9.3), which affects Sudo versions prior to 1.9.17p1
Check your version:
sudo --version
As mentioned above, sudo version 1.9.17p1 patches this. This version was already released in June of this year, so many distributions should have it.
replies:
Laughs in opendoas
replies:
I tried using the systemd alternatie, run0 or whatever.... it's really weird
all 13 comments