Vulnerability-Lookup

CVE-2026-82474 (GCVE-0-2026-82474)

Vulnerability from cvelistv5 – Published: 2026-08-29 16:35 – Updated: 2026-09-02 17:57

Title

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

Summary

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Severity

8.5 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-02 17:57 UTC

CWE

CWE-693 - Protection Mechanism Failure

Assigner

VulnCheck mitre root

References

4 references

URL	Tags
https://github.com/sudo-project/sudo/commit/71fbe…	patch
https://github.com/sudo-project/sudo/blob/v1.9.17…	technical-description
https://github.com/sudo-project/sudo	product
https://www.vulncheck.com/advisories/sudo-through…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version	CPE status
sudo-project	sudo	Affected: 0 , ≤ 1.9.17p2 (custom) cpe:2.3:a:sudo_project:sudo::::::::

Date Public

2026-03-20 00:00

Credits

XlabAI Team of Tencent Xuanwu Lab Guannan Wang Zhanpeng Liu Guancheng Li Nofil Qasim Quentin Chalabi

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-82474",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T17:57:08.126153Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-02T17:57:15.670Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "sudo",
          "vendor": "sudo-project",
          "versions": [
            {
              "lessThanOrEqual": "1.9.17p2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.9.17p2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "XlabAI Team of Tencent Xuanwu Lab"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Guannan Wang"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Zhanpeng Liu"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Guancheng Li"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Nofil Qasim"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Quentin Chalabi"
        }
      ],
      "datePublic": "2026-03-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-693",
              "description": "Protection Mechanism Failure",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-29T16:35:33.836Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Patch Commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/sudo-project/sudo"
        },
        {
          "name": "VulnCheck Advisory: Sudo through 1.9.17p2 Intercept Policy Bypass via execveat",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat"
        }
      ],
      "title": "Sudo through 1.9.17p2 Intercept Policy Bypass via execveat",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-82474",
    "datePublished": "2026-08-29T16:35:33.836Z",
    "dateReserved": "2026-08-29T14:11:14.262Z",
    "dateUpdated": "2026-09-02T17:57:15.670Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-82474",
      "date": "2026-09-18",
      "epss": "0.00131",
      "percentile": "0.03076"
    },
    "microsoft_vex": {
      "current_release_date": "2026-09-06T04:38:21.000Z",
      "cve": "CVE-2026-82474",
      "id": "msrc_CVE-2026-82474",
      "initial_release_date": "2026-08-31T14:03:09.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "Sudo through 1.9.17p2 Intercept Policy Bypass via execveat",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-82474.json",
      "version": "2"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "sudo",
                "vendor": "sudo-project",
                "versions": [
                  {
                    "lessThanOrEqual": "1.9.17p2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "disclosure@vulncheck.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging."
          }
        ],
        "id": "CVE-2026-82474",
        "lastModified": "2026-09-10T19:54:25.810",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "disclosure@vulncheck.com",
              "type": "Secondary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "LOCAL",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 8.5,
                "baseSeverity": "HIGH",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "disclosure@vulncheck.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-82474",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T17:57:08.126153Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-08-29T17:17:59.910",
        "references": [
          {
            "source": "disclosure@vulncheck.com",
            "url": "https://github.com/sudo-project/sudo"
          },
          {
            "source": "disclosure@vulncheck.com",
            "url": "https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c"
          },
          {
            "source": "disclosure@vulncheck.com",
            "url": "https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf"
          },
          {
            "source": "disclosure@vulncheck.com",
            "url": "https://www.vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat"
          }
        ],
        "sourceIdentifier": "disclosure@vulncheck.com",
        "vulnStatus": "Awaiting Analysis",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-693"
              }
            ],
            "source": "disclosure@vulncheck.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-09-17T23:41:49+00:00",
      "cve": "CVE-2026-82474",
      "id": "CVE-2026-82474",
      "initial_release_date": "2026-08-29T16:35:33.836000+00:00",
      "product_status:fixed": "36",
      "product_status:known_affected": "3",
      "product_status:known_not_affected": "8",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "sudo: Sudo: Policy bypass allows unauthorized program execution via execveat",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-82474.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-09-15T01:03:47Z",
      "cve": "CVE-2026-82474",
      "id": "CVE-2026-82474",
      "initial_release_date": "2026-09-01T13:25:33Z",
      "product_status:known_affected": "86",
      "product_status:known_not_affected": "57",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-82474",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-82474.json",
      "version": "4"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-82474",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T17:57:08.126153Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-02T17:57:11.629Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "sudo",
              "vendor": "sudo-project",
              "versions": [
                {
                  "lessThanOrEqual": "1.9.17p2",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
                      "versionEndIncluding": "1.9.17p2",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "XlabAI Team of Tencent Xuanwu Lab"
            },
            {
              "lang": "en",
              "type": "finder",
              "value": "Guannan Wang"
            },
            {
              "lang": "en",
              "type": "finder",
              "value": "Zhanpeng Liu"
            },
            {
              "lang": "en",
              "type": "finder",
              "value": "Guancheng Li"
            },
            {
              "lang": "en",
              "type": "finder",
              "value": "Nofil Qasim"
            },
            {
              "lang": "en",
              "type": "finder",
              "value": "Quentin Chalabi"
            }
          ],
          "datePublic": "2026-03-20T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "LOCAL",
                "baseScore": 8.5,
                "baseSeverity": "HIGH",
                "privilegesRequired": "LOW",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH"
              },
              "format": "CVSS"
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-693",
                  "description": "Protection Mechanism Failure",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-29T16:35:33.836Z",
            "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
            "shortName": "VulnCheck"
          },
          "references": [
            {
              "name": "Patch Commit",
              "tags": [
                "patch"
              ],
              "url": "https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf"
            },
            {
              "tags": [
                "technical-description"
              ],
              "url": "https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c"
            },
            {
              "tags": [
                "product"
              ],
              "url": "https://github.com/sudo-project/sudo"
            },
            {
              "name": "VulnCheck Advisory: Sudo through 1.9.17p2 Intercept Policy Bypass via execveat",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://www.vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat"
            }
          ],
          "title": "Sudo through 1.9.17p2 Intercept Policy Bypass via execveat",
          "x_generator": {
            "engine": "vulncheck-endgame"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "assignerShortName": "VulnCheck",
        "cveId": "CVE-2026-82474",
        "datePublished": "2026-08-29T16:35:33.836Z",
        "dateReserved": "2026-08-29T14:11:14.262Z",
        "dateUpdated": "2026-09-02T17:57:15.670Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

ALSA-2026:68692

Vulnerability from osv_almalinux – Published: 2026-09-17 00:00 – Updated: 2026-09-18 13:17 – Source website

Summary

Important: sudo security, bug fix, and enhancement update

Details

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

sudo: Sudo: Policy bypass allows unauthorized program execution via execveat (CVE-2026-82474)

Bug Fix(es) and Enhancement(s):

Use canonicalized path if user path contains ".." (JIRA:AlmaLinux-212546)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

URL

Type

	https://access.redhat.com/errata/RHSA-2026:68692	ADVISORY
	https://access.redhat.com/security/cve/CVE-2026-82474	REPORT
	https://bugzilla.redhat.com/2525889	REPORT
	https://errata.almalinux.org/10/ALSA-2026-68692.html	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:10",
        "name": "sudo"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.17-10.p2.el10_2.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:10",
        "name": "sudo-python-plugin"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.17-10.p2.el10_2.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.  \n\nSecurity Fix(es):  \n\n  * sudo: Sudo: Policy bypass allows unauthorized program execution via execveat (CVE-2026-82474)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Use canonicalized path if user path contains \"..\" (JIRA:AlmaLinux-212546)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:68692",
  "modified": "2026-09-18T13:17:01Z",
  "published": "2026-09-17T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:68692"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-82474"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2525889"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/10/ALSA-2026-68692.html"
    }
  ],
  "related": [
    "CVE-2026-82474"
  ],
  "summary": "Important: sudo security, bug fix, and enhancement update"
}

BELL-CVE-2026-82474 (CVE-2026-82474)

Vulnerability from osv_bellsoft – Published: 2026-09-03 06:05 – Updated: 2026-09-18 16:14 – Source website

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

https://docs.bell-sw.com/security/cves/CVE-2026-82474

ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Alpaquita:23",
        "name": "sudo",
        "purl": "pkg:apk/alpaquita/sudo?arch=source\u0026distro=23"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "1.9.12_p1-r1"
            },
            {
              "fixed": "1.9.15_p5-r3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Alpaquita:25",
        "name": "sudo",
        "purl": "pkg:apk/alpaquita/sudo?arch=source\u0026distro=25"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "1.9.16_p2-r1"
            },
            {
              "fixed": "1.9.17_p2-r2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Alpaquita:stream",
        "name": "sudo",
        "purl": "pkg:apk/alpaquita/sudo?arch=source\u0026distro=stream"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "1.9.13_p3-r0"
            },
            {
              "fixed": "1.9.17_p2-r2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "id": "BELL-CVE-2026-82474",
  "modified": "2026-09-18T16:14:50.14859Z",
  "published": "2026-09-03T06:05:29.671596Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://docs.bell-sw.com/security/cves/CVE-2026-82474"
    }
  ],
  "schema_version": "1.7.4",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "upstream": [
    "CVE-2026-82474"
  ]
}

FKIE_CVE-2026-82474

Vulnerability from fkie_nvd - Published: 2026-08-29 17:17 - Updated: 2026-09-10 19:54

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	disclosure@vulncheck.com	https://github.com/sudo-project/sudo
	disclosure@vulncheck.com	https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c
	disclosure@vulncheck.com	https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf
	disclosure@vulncheck.com	https://www.vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "sudo",
          "vendor": "sudo-project",
          "versions": [
            {
              "lessThanOrEqual": "1.9.17p2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "disclosure@vulncheck.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging."
    }
  ],
  "id": "CVE-2026-82474",
  "lastModified": "2026-09-10T19:54:25.810",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "disclosure@vulncheck.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 8.5,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "disclosure@vulncheck.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-82474",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-09-02T17:57:08.126153Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-29T17:17:59.910",
  "references": [
    {
      "source": "disclosure@vulncheck.com",
      "url": "https://github.com/sudo-project/sudo"
    },
    {
      "source": "disclosure@vulncheck.com",
      "url": "https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c"
    },
    {
      "source": "disclosure@vulncheck.com",
      "url": "https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf"
    },
    {
      "source": "disclosure@vulncheck.com",
      "url": "https://www.vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat"
    }
  ],
  "sourceIdentifier": "disclosure@vulncheck.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-693"
        }
      ],
      "source": "disclosure@vulncheck.com",
      "type": "Secondary"
    }
  ]
}

GHSA-36M7-65W5-JM6C

Vulnerability from github – Published: 2026-08-29 18:31 – Updated: 2026-08-29 18:31

Details

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 (High)


                  
                    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-82474"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-693"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-29T17:17:59Z",
    "severity": "HIGH"
  },
  "details": "Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.",
  "id": "GHSA-36m7-65w5-jm6c",
  "modified": "2026-08-29T18:31:32Z",
  "published": "2026-08-29T18:31:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82474"
    },
    {
      "type": "WEB",
      "url": "https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf"
    },
    {
      "type": "WEB",
      "url": "https://github.com/sudo-project/sudo"
    },
    {
      "type": "WEB",
      "url": "https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c"
    },
    {
      "type": "WEB",
      "url": "https://www.vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

OESA-2026-3735 (CVE-2026-82474)

Vulnerability from osv_openeuler – Published: 2026-09-14 16:33 – Updated: 2026-09-14 16:33 – Source website

Summary

sudo security update

Details

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Severity

8.5 (High)


                    
                      CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-82474	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "sudo-1.9.15p5-8.oe2403sp1.aarch64.rpm",
          "sudo-debuginfo-1.9.15p5-8.oe2403sp1.aarch64.rpm",
          "sudo-debugsource-1.9.15p5-8.oe2403sp1.aarch64.rpm",
          "sudo-devel-1.9.15p5-8.oe2403sp1.aarch64.rpm"
        ],
        "noarch": [
          "sudo-help-1.9.15p5-8.oe2403sp1.noarch.rpm"
        ],
        "src": [
          "sudo-1.9.15p5-8.oe2403sp1.src.rpm"
        ],
        "x86_64": [
          "sudo-1.9.15p5-8.oe2403sp1.x86_64.rpm",
          "sudo-debuginfo-1.9.15p5-8.oe2403sp1.x86_64.rpm",
          "sudo-debugsource-1.9.15p5-8.oe2403sp1.x86_64.rpm",
          "sudo-devel-1.9.15p5-8.oe2403sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP1",
        "name": "sudo",
        "purl": "pkg:rpm/openEuler/sudo\u0026distro=openEuler-24.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.15p5-8.oe2403sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\n\nSudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.(CVE-2026-82474)",
  "id": "OESA-2026-3735",
  "modified": "2026-09-14T16:33:51Z",
  "published": "2026-09-14T16:33:51Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3735"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82474"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "sudo security update",
  "upstream": [
    "CVE-2026-82474"
  ]
}

OESA-2026-3736 (CVE-2026-82474)

Vulnerability from osv_openeuler – Published: 2026-09-14 16:33 – Updated: 2026-09-14 16:33 – Source website

Summary

sudo security update

Details

Security Fix(es):

Severity

8.5 (High)


                    
                      CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-82474	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "sudo-1.9.15p5-8.oe2403sp4.aarch64.rpm",
          "sudo-debuginfo-1.9.15p5-8.oe2403sp4.aarch64.rpm",
          "sudo-debugsource-1.9.15p5-8.oe2403sp4.aarch64.rpm",
          "sudo-devel-1.9.15p5-8.oe2403sp4.aarch64.rpm"
        ],
        "noarch": [
          "sudo-help-1.9.15p5-8.oe2403sp4.noarch.rpm"
        ],
        "src": [
          "sudo-1.9.15p5-8.oe2403sp4.src.rpm"
        ],
        "x86_64": [
          "sudo-1.9.15p5-8.oe2403sp4.x86_64.rpm",
          "sudo-debuginfo-1.9.15p5-8.oe2403sp4.x86_64.rpm",
          "sudo-debugsource-1.9.15p5-8.oe2403sp4.x86_64.rpm",
          "sudo-devel-1.9.15p5-8.oe2403sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP4",
        "name": "sudo",
        "purl": "pkg:rpm/openEuler/sudo\u0026distro=openEuler-24.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.15p5-8.oe2403sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\n\nSudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.(CVE-2026-82474)",
  "id": "OESA-2026-3736",
  "modified": "2026-09-14T16:33:51Z",
  "published": "2026-09-14T16:33:51Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3736"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82474"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "sudo security update",
  "upstream": [
    "CVE-2026-82474"
  ]
}

RHSA-2026:65569

Vulnerability from csaf_redhat - Published: 2026-09-08 17:19 - Updated: 2026-09-17 23:54

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2026-82474.

CVE-2026-82474

A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the `execveat` system call in ptrace-based intercept mode. By directly calling `execveat` or `fexecve`, an attacker can execute programs that would otherwise be denied, thereby circumventing policy enforcement and logging mechanisms.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 3 products

https://access.redhat.com/errata/RHSA-2026:65569

Open the full advisory

RHSA-2026:68692

Vulnerability from csaf_opensuse - Published: 2026-09-17 00:00 - Updated: 2026-09-18 17:15

Summary

security update for sudo

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2026-82474.

CVE-2026-82474

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 2 products

Open the full advisory

UBUNTU-CVE-2026-82474 (CVE-2026-82474)

Vulnerability from osv_ubuntu – Published: 2026-08-29 17:17 – Updated: 2026-09-11 18:24 – Source website

Details

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 (High)


                    
                      CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-82474	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-82474	REPORT
	https://www.vulncheck.com/advisories/sudo-through…	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "sudo",
            "binary_version": "1.8.9p5-1ubuntu1.5+esm8"
          },
          {
            "binary_name": "sudo-ldap",
            "binary_version": "1.8.9p5-1ubuntu1.5+esm8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "sudo",
        "purl": "pkg:deb/ubuntu/sudo@1.8.9p5-1ubuntu1.5+esm8?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.8.6p3-0ubuntu3",
        "1.8.8-2ubuntu1",
        "1.8.8-2ubuntu2",
        "1.8.9p4-1ubuntu1",
        "1.8.9p4-1ubuntu2",
        "1.8.9p5-1ubuntu1",
        "1.8.9p5-1ubuntu1.1",
        "1.8.9p5-1ubuntu1.2",
        "1.8.9p5-1ubuntu1.3",
        "1.8.9p5-1ubuntu1.4",
        "1.8.9p5-1ubuntu1.5+esm1",
        "1.8.9p5-1ubuntu1.5+esm2",
        "1.8.9p5-1ubuntu1.5+esm3",
        "1.8.9p5-1ubuntu1.5+esm5",
        "1.8.9p5-1ubuntu1.5+esm6",
        "1.8.9p5-1ubuntu1.5+esm7",
        "1.8.9p5-1ubuntu1.5+esm8"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "sudo",
            "binary_version": "1.8.16-0ubuntu1.10+esm3"
          },
          {
            "binary_name": "sudo-ldap",
            "binary_version": "1.8.16-0ubuntu1.10+esm3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "sudo",
        "purl": "pkg:deb/ubuntu/sudo@1.8.16-0ubuntu1.10+esm3?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.8.12-1ubuntu3",
        "1.8.16-0ubuntu1",
        "1.8.16-0ubuntu1.1",
        "1.8.16-0ubuntu1.2",
        "1.8.16-0ubuntu1.3",
        "1.8.16-0ubuntu1.4",
        "1.8.16-0ubuntu1.5",
        "1.8.16-0ubuntu1.6",
        "1.8.16-0ubuntu1.7",
        "1.8.16-0ubuntu1.8",
        "1.8.16-0ubuntu1.9",
        "1.8.16-0ubuntu1.10",
        "1.8.16-0ubuntu1.10+esm1",
        "1.8.16-0ubuntu1.10+esm2",
        "1.8.16-0ubuntu1.10+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "sudo",
            "binary_version": "1.8.21p2-3ubuntu1.6+esm1"
          },
          {
            "binary_name": "sudo-ldap",
            "binary_version": "1.8.21p2-3ubuntu1.6+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "sudo",
        "purl": "pkg:deb/ubuntu/sudo@1.8.21p2-3ubuntu1.6+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.8.20p2-1ubuntu1",
        "1.8.21p2-2ubuntu1",
        "1.8.21p2-3ubuntu1",
        "1.8.21p2-3ubuntu1.1",
        "1.8.21p2-3ubuntu1.2",
        "1.8.21p2-3ubuntu1.3",
        "1.8.21p2-3ubuntu1.4",
        "1.8.21p2-3ubuntu1.5",
        "1.8.21p2-3ubuntu1.6",
        "1.8.21p2-3ubuntu1.6+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "sudo",
            "binary_version": "1.8.31-1ubuntu1.5+esm1"
          },
          {
            "binary_name": "sudo-ldap",
            "binary_version": "1.8.31-1ubuntu1.5+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "sudo",
        "purl": "pkg:deb/ubuntu/sudo@1.8.31-1ubuntu1.5+esm1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.8.27-1ubuntu4",
        "1.8.29-1ubuntu1",
        "1.8.31-1ubuntu1",
        "1.8.31-1ubuntu1.1",
        "1.8.31-1ubuntu1.2",
        "1.8.31-1ubuntu1.4",
        "1.8.31-1ubuntu1.5",
        "1.8.31-1ubuntu1.5+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "sudo",
            "binary_version": "1.9.9-1ubuntu2.6"
          },
          {
            "binary_name": "sudo-ldap",
            "binary_version": "1.9.9-1ubuntu2.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "sudo",
        "purl": "pkg:deb/ubuntu/sudo@1.9.9-1ubuntu2.6?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.9.5p2-3ubuntu2",
        "1.9.9-1ubuntu2",
        "1.9.9-1ubuntu2.1",
        "1.9.9-1ubuntu2.2",
        "1.9.9-1ubuntu2.3",
        "1.9.9-1ubuntu2.4",
        "1.9.9-1ubuntu2.5",
        "1.9.9-1ubuntu2.6"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libnss-sudo",
            "binary_version": "1.9.15p5-3ubuntu5.24.04.2"
          },
          {
            "binary_name": "sudo",
            "binary_version": "1.9.15p5-3ubuntu5.24.04.2"
          },
          {
            "binary_name": "sudo-ldap",
            "binary_version": "1.9.15p5-3ubuntu5.24.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "sudo",
        "purl": "pkg:deb/ubuntu/sudo@1.9.15p5-3ubuntu5.24.04.2?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.9.14p2-1ubuntu1",
        "1.9.15p5-3ubuntu1",
        "1.9.15p5-3ubuntu3",
        "1.9.15p5-3ubuntu4",
        "1.9.15p5-3ubuntu5",
        "1.9.15p5-3ubuntu5.24.04.1",
        "1.9.15p5-3ubuntu5.24.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libnss-sudo",
            "binary_version": "1.9.17p2-1ubuntu3"
          },
          {
            "binary_name": "sudo",
            "binary_version": "1.9.17p2-1ubuntu3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "sudo",
        "purl": "pkg:deb/ubuntu/sudo@1.9.17p2-1ubuntu3?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.9.17p2-1ubuntu1",
        "1.9.17p2-1ubuntu2",
        "1.9.17p2-1ubuntu3"
      ]
    }
  ],
  "aliases": [],
  "details": "Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.",
  "id": "UBUNTU-CVE-2026-82474",
  "modified": "2026-09-11T18:24:28Z",
  "published": "2026-08-29T17:17:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-82474"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82474"
    },
    {
      "type": "REPORT",
      "url": "https://www.vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-82474"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-82474 (GCVE-0-2026-82474)

ALSA-2026:68692

BELL-CVE-2026-82474 (CVE-2026-82474)

FKIE_CVE-2026-82474

GHSA-36M7-65W5-JM6C

OESA-2026-3735 (CVE-2026-82474)

OESA-2026-3736 (CVE-2026-82474)

RHSA-2026:65569

RHSA-2026:68692

UBUNTU-CVE-2026-82474 (CVE-2026-82474)

Tags

Sightings

Nomenclature

Related by attack behaviour