CVE Catalog
CVE-2025-32462
LowCVSS 2.8Exploitation Probability (EPSS)
High risk3.24%
87th percentile - higher than 87% of all known CVEs
Summary
A vulnerability in Sudo before version 1.9.17p1 allows listed users in the sudoers file to execute commands on unintended machines when the file specifies a host that is neither the current host nor ALL.
Risk Assessment
The organization may face unauthorized access to systems, leading to data integrity and confidentiality breaches, as well as potential takeover of critical resources.
Recommendation
Immediately update Sudo to version 1.9.17p1 or later, and review and correct the sudoers file configuration to avoid incorrect host specifications.
Original NVD description (English source)
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.