CVE-2025-32462

HIGH EPSS 86.7%
Published Jun 30, 202512mo ago · Modified Jun 17, 20261w ago
8.8 CVSS 3.1
High
Find Similar
Published Jun 30, 2025 12mo ago
Last Modified Jun 17, 2026 1w ago

Description

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

CVSS Details

Base Score
8.8
Exploitability
2.0
Impact
6.0
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Changed
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
86.7% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-863 Incorrect Authorization Authorization

Affected Products 2

VendorProductVersionRange
sudo_projectsudo* <1.9.17
sudo_projectsudo1.9.17any

References 14

  • access.redhat.com https://access.redhat.com/security/cve/cve-2025-32462
  • bugs.gentoo.org https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32462
  • explore.alas.aws.amazon.com https://explore.alas.aws.amazon.com/CVE-2025-32462.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/06/msg00033.html
  • lists.debian.org https://lists.debian.org/debian-security-announce/2025/msg00118.html
  • security-tracker.debian.org https://security-tracker.debian.org/tracker/CVE-2025-32462
  • ubuntu.com https://ubuntu.com/security/notices/USN-7604-1
  • openwall.com https://www.openwall.com/lists/oss-security/2025/06/30/2
    Mailing ListThird Party Advisory
  • secpod.com https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/
    Third Party Advisory
  • stratascale.com https://www.stratascale.com/vulnerability-alert-CVE-2025-32462-sudo-host
    ExploitThird Party Advisory
  • sudo.ws https://www.sudo.ws/releases/changelog/
    Release Notes
  • sudo.ws https://www.sudo.ws/security/advisories/
    Vendor Advisory
  • sudo.ws https://www.sudo.ws/security/advisories/host_any/
  • suse.com https://www.suse.com/security/cve/CVE-2025-32462.html

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.