Sudo 1.9.17 Host Option · Elevation of Privilege
Source Exploit-DB RSS Feed
Rated by Threat Radar
Data as of 23 Jul 2025, 01:53 UTC
What to do
AI-suggested
Organizations should immediately verify the version of sudo deployed in their environments and prioritize upgrading to a patched version once available from official sources. In the absence of an official patch, applying temporary mitigations such as restricting local user access, enforcing strict user permissions, and monitoring sudo usage logs for unusual activity can reduce risk. Implementing multi-factor authentication for user accounts with sudo privileges and employing endpoint detection and response (EDR) solutions to detect privilege escalation attempts are recommended. Additionally, organizations should conduct thorough audits of local user accounts and remove or disable unnecessary accounts with sudo access. Network segmentation to limit lateral movement and regular security awareness training to prevent initial compromise vectors will further reduce exploitation likelihood.
Description
Sudo 1.9.17 Host Option - Elevation of Privilege
Indicators of compromise
Exploit source code
# Exploit Title: Sudo 1.9.17 Host Option - Elevation of Privilege
# Date: 2025-06-30
# Exploit Author: Rich Mirch
# Vendor Homepage: https://www.sudo.ws
# Software Link: https://www.sudo.ws/dist/sudo-1.9.17.tar.gz
# Version: Stable 1.9.0 - 1.9.17, Legacy 1.8.8 - 1.8.32
# Fixed in: 1.9.17p1
# Vendor Advisory: https://www.sudo.ws/security/advisories/host_any
# Blog:
https://www.stratascale.com/vulnerability-alert-CVE-2025-32462-sudo-host
# Tested on: Ubuntu 24.04.1; Sudo 1.9.15p5, macOS Sequoia 15…