{"uuid": "0d24cab5-fadf-4fc2-a61c-6de2d09c6595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-32463", "type": "seen", "source": "https://t.me/cyberwarehouse/967", "content": "About Elevation of Privilege - Sudo (CVE-2025-32463) vulnerability. Sudo is a utility in Unix-like operating systems that allows a user to run a program with the privileges of another user, by default the superuser (root).\n\n\ud83d\udd3b The vulnerability allows a local attacker to escalate privileges by forcing sudo to load an arbitrary dynamic library when using a root directory specified via the -R (--chroot) option. An attacker can execute arbitrary commands as root on systems that support  /etc/nsswitch.conf (Name Service Switch configuration file).\n\n\u2699\ufe0f The vulnerability was fixed in sudo 1.9.17p1, released on June 30, 2025.\n\n\ud83d\udee0 On the same day, a write-up by researcher Rich Mirch was published with a PoC exploit.\n\n\ud83d\udc27 I noted Linux vendors\u2019 remediation of this vulnerability in July Linux Patch Wednesday. Multiple public exploits for the vulnerability were available.\n\n\ud83d\udc7e On September 29, the vulnerability was added to CISA KEV.\n\n\u041d\u0430 \u0440\u0443\u0441\u0441\u043a\u043e\u043c\n\n@avleonovcom #Linux #sudo", "creation_timestamp": "2026-07-26T02:00:08.472036Z"}