The sudo utility in Red Hat Enterprise Linux 10.0 Extended Update Support contains a privilege escalation vulnerability identified as CVE-2026-35535. This vulnerability arises from a failure in the privilege drop calls within sudo, potentially allowing an attacker to escalate privileges improperly. Red Hat Product Security has issued an important security advisory (RHSA-2026:13888) and released updated sudo packages (version 1.9.15-8.p5.el10_0.3) to fix this issue. The update is available for multiple architectures including x86_64, IBM z Systems (s390x), Power little endian (ppc64le), and ARM 64 (aarch64).

Successful exploitation of this vulnerability could allow an unprivileged user to escalate their privileges, potentially gaining root-level access on affected systems. This could lead to full system compromise, including confidentiality, integrity, and availability impacts. However, no known exploits in the wild have been reported so far.

Red Hat has released an updated sudo package (version 1.9.15-8.p5.el10_0.3) that addresses this privilege escalation vulnerability. Users of Red Hat Enterprise Linux 10.0 Extended Update Support should apply this security update promptly. For detailed update instructions, refer to Red Hat's official guidance at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.