CVE-2026-82474highCWE-693

CVE-2026-82474: high-severity vulnerability in sudo-project sudo

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

Published · Updated

Follow this CVE+ Monitor sudo+ Monitor sudo

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 8.5epss 0.2%
from disclosure to weapon65 days
Published on NVDAug 29
1st PoC+65d
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
sudo-project · sudo
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.