{"id":"CVE-2025-32462","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-32462","generatedAt":"2026-10-28T04:45:58.959Z","title":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","published":"2025-06-30T21:15:30.000Z","lastModified":"2026-07-14T13:17:33.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-863"],"affected":["sudo project/sudo"],"epss":{"score":0.04477,"percentile":0.9141,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2025-07-08","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":52354,"kind":"exploit","title":"Sudo 1.9.17 Host Option - Elevation of Privilege","url":"https://www.exploit-db.com/exploits/52354","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/52354.txt","file":"exploits/linux/local/52354.txt","published":"2025-07-08","added":"2025-07-08","updated":"2025-07-08","author":"Rich Mirch","type":"local","platform":"linux","port":null,"verified":false,"codes":["CVE-2025-32462"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"A public exploit is published in Exploit-DB and the impact is high, while EPSS rates exploitation at 4.5%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[],"references":[{"url":"https://access.redhat.com/security/cve/cve-2025-32462","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32462","source":"cve@mitre.org"},{"url":"https://explore.alas.aws.amazon.com/CVE-2025-32462.html","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-security-announce/2025/msg00118.html","source":"cve@mitre.org"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-32462","source":"cve@mitre.org"},{"url":"https://ubuntu.com/security/notices/USN-7604-1","source":"cve@mitre.org"},{"url":"https://www.openwall.com/lists/oss-security/2025/06/30/2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.stratascale.com/vulnerability-alert-CVE-2025-32462-sudo-host","tags":["Exploit","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.sudo.ws/releases/changelog/","tags":["Release Notes"],"source":"cve@mitre.org"},{"url":"https://www.sudo.ws/security/advisories/","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://www.sudo.ws/security/advisories/host_any/","source":"cve@mitre.org"},{"url":"https://www.suse.com/security/cve/CVE-2025-32462.html","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-32462","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}