UpHeron
All vulnerabilities

Servers and applications

CVE-2025-32462

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Severity
High 8.8
Published
30 Jun 2025
Last changed
14 Jul 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.9.17
Sources
NVD

Affected software

SoftwareAffected versions
sudoServers and applications · cpe:a:sudo_project:sudo
  • Every version before 1.9.17
  • Version 1.9.17

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-32462
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-32462