THREATOPS
THREAT OPSCVEs › CVE-2025-32463

CVE-2025-32463 — Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

CISA KEVExploited: confirmedSudo

Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.

Vulnerability details