Skip to content
Sign in
2.8 Low

CVE-2025-32462 Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL,…

Description

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Affected products and versions

Product Affected versions Fixed in
Sudo 1.8 1.8.8 → < 1.9.17p1 1.9.17p1
SIDIS Secured SmartPlug 7.26 earliest → < 7.26.0310 7.26.0310

Other CVEs of Sudo

The 3 CVEs of Sudo →
CVE-2026-35535 In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop… 7.4 High CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability 9.3 Critical
Track this CVE