Skip to content
Threat Feed
Subscribe

Vendor

Sudo Project

1 brief RSS
high advisory

Sudo Chroot Privilege Escalation via NSSwitch File Manipulation (CVE-2025-32463)

Attackers can exploit CVE-2025-32463, a privilege escalation vulnerability in `sudo` when used with `chroot`, by creating a malicious `nsswitch.conf` file and associated Name Service Switch (NSS) modules within a controlled chroot environment to trick `sudo` into loading attacker-controlled code, leading to root privileges on Linux systems.

PoC sudo +1 privilege-escalation linux cve vulnerability nsswitch
1r 2t 1c updated