8.8

CVE-2025-32462: sudo_project sudo Incorrect Authorization

CVSS: 8.8v3.1HighModified
AliasesSUSE-SU-2025:02174-1SUSE-SU-2025:02175-1SUSE-SU-2025:02178-1
Published 30-06-2025Last modified 14-07-2026
Open JSON

Vulnerability summary

CVE-2025-32462 is a high (CVSS 8.8) Incorrect Authorization vulnerability in sudo_project sudo. EPSS estimates a 4.48% chance of exploitation in the next 30 days, higher than 91.3% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
46/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (NVD)
EPSS score
4.48%
0%100%
Low · +0.20 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 7 · Related 6
MGASA-2025-0213OPENSUSE-SU-2025:15298-1RHSA-2025:11537SUSE-SU-2025:02177-1SUSE-SU-2025:20478-1SUSE-SU-2025:20489-1

Timeline

  1. 30-06-2025
    PublishedVulnerability first disclosed.
  2. 14-07-2026
    Last modifiedVulnerability information updated.

Description

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

CVSS metrics

7 scores · 7 sources · 1 version

EPSS trend

Probability

4.48%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

+0.20 pp

From 4.28% on 18-09-2026

18-09-202618-10-2026
EPSS score
4.48%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found
  • referenceUnverified

    Exploit Reference (stratascale.com)

    Maturity: unknown

  • exploit-databaselocallinuxUnverified

    Sudo 1.9.17 Host Option - Elevation of Privilege

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Suse21 products
  • sudo&distro=SUSE Enterprise Storage 7.1< 1.9.5p2-150300.3.36.1
  • sudo&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 1.9.5p2-150300.3.36.1
  • sudo&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 1.9.9-150400.4.39.1
  • sudo&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 1.9.9-150400.4.39.1
  • sudo&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 1.9.12p1-150500.7.13.1
Redhat6 products
  • sudo< 0:1.9.5p2-1.el8_10.1 | < 0:1.8.29-7.el8_4.3 | < 0:1.8.29-5.el8_2.3 | < 0:1.9.5p2-1.el8_6.1 | < 0:1.9.5p2-10.el9_4.1 | < 0:1.9.5p2-9.el9_2.3 | < 0:1.9.5p2-7.el9_0.5 | < 0:1.9.5p2-1.el8_8.1 | < 0:1.8.23-10.el7_9.4 | < 0:1.9.5p2-10.el9_6.1
  • sudo-debuginfo< 0:1.9.5p2-1.el8_10.1 | < 0:1.8.29-7.el8_4.3 | < 0:1.8.29-5.el8_2.3 | < 0:1.9.5p2-1.el8_6.1 | < 0:1.9.5p2-10.el9_4.1 | < 0:1.9.5p2-9.el9_2.3 | < 0:1.9.5p2-7.el9_0.5 | < 0:1.9.5p2-1.el8_8.1 | < 0:1.8.23-10.el7_9.4 | < 0:1.9.5p2-10.el9_6.1
  • sudo-debugsource< 0:1.9.5p2-1.el8_10.1 | < 0:1.8.29-7.el8_4.3 | < 0:1.8.29-5.el8_2.3 | < 0:1.9.5p2-1.el8_6.1 | < 0:1.9.5p2-10.el9_4.1 | < 0:1.9.5p2-9.el9_2.3 | < 0:1.9.5p2-7.el9_0.5 | < 0:1.9.5p2-1.el8_8.1 | < 0:1.9.5p2-10.el9_6.1
  • sudo-devel< 0:1.8.23-10.el7_9.4
  • sudo-python-plugin< 0:1.9.5p2-10.el9_4.1 | < 0:1.9.5p2-9.el9_2.3 | < 0:1.9.5p2-7.el9_0.5 | < 0:1.9.5p2-10.el9_6.1
Chainguard1 product
  • sudo< 1.9.17-r0
Debian1 product
  • sudo< 1.9.16p2-3 | < 1.9.13p3-1+deb12u2 | < 1.9.5p2-3+deb11u2
Sudo_project1 product
  • sudo≥ 1.8.8, < 1.9.17p1 | < 1.9.17 | 1.9.17
Ubuntu1 product
  • sudo< 1.9.9-1ubuntu2.5 | < 1.9.15p5-3ubuntu5.24.04.1 | < 1.8.9p5-1ubuntu1.5+esm8 | < 1.8.16-0ubuntu1.10+esm3 | < 1.8.21p2-3ubuntu1.6+esm1 | < 1.8.31-1ubuntu1.5+esm1
Wolfi1 product
  • sudo< 1.9.17-r0

7 vendors · 32 products

References

50 links
Show all 50 references