Skip to content
Threat Feed
Subscribe

Tag

Sudo

4 briefs RSS
high advisory

Sudo Chroot Privilege Escalation via NSSwitch File Manipulation (CVE-2025-32463)

Attackers can exploit CVE-2025-32463, a privilege escalation vulnerability in `sudo` when used with `chroot`, by creating a malicious `nsswitch.conf` file and associated Name Service Switch (NSS) modules within a controlled chroot environment to trick `sudo` into loading attacker-controlled code, leading to root privileges on Linux systems.

sudo +1 privilege-escalation linux cve vulnerability nsswitch
1r 2t 1c
high advisory

Linuxfabrik Monitoring Plugins Local Privilege Escalation via Sudo apt-get

A local privilege escalation vulnerability, CVE-2026-52817, exists in Linuxfabrik Monitoring Plugins within its Debian.sudoers configuration, allowing a pre-compromised `nagios` user to inject arbitrary `apt-get` arguments to execute commands as root and obtain a root shell on affected Debian systems.

Linuxfabrik Monitoring Plugins +1 privilege-escalation linux sudo cve
1r 1t
high advisory

Sudo Privilege Escalation Vulnerabilities

Multiple vulnerabilities in sudo allow a local attacker to bypass security precautions and escalate privileges to root.

sudo privilege-escalation linux
2r 1t 2c
high advisory

Sudo Privilege Escalation Vulnerability (CVE-2026-35535)

CVE-2026-35535 describes a privilege escalation vulnerability in Sudo versions up to 1.9.17p2, where a non-fatal error during privilege dropping can allow an attacker to gain elevated privileges.

sudo privilege-escalation cve-2026-35535
2r 1t 1c