THREAT OPS › CVEs › CVE-2025-32463
CVE-2025-32463 — Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.
Vulnerability details
- Affected productsSudo
- KEV remediation due2025-10-20