CVE-2025-32463
Quick assessment
Affected
Sudo project Sudo
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Sudo是一款使用于类Unix系统的，允许用户通过安全的方式使用特殊的权限执行命令的程序。 Sudo 1.9.17p1之前版本存在安全漏洞，该漏洞源于使用用户控制目录中的/etc/nsswitch.conf可能导致获取root访问权限。
Public Exploits 2
ExploitDB · 1
EDB-52352 [local]
Metasploit · 1
sudo_chroot_cve_2025_32463.rb [exploit]
In-the-Wild Activity Observed
github_trending · low
cisa_kev · confirmed
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1548 · Abuse Elevation Control Mechanism
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-32463
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
从非可信控制范围包含功能例程
Source: CVE Program / CVE List V5
Vulnerability Title
Sudo 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sudo是一款使用于类Unix系统的，允许用户通过安全的方式使用特殊的权限执行命令的程序。 Sudo 1.9.17p1之前版本存在安全漏洞，该漏洞源于使用用户控制目录中的/etc/nsswitch.conf可能导致获取root访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Sudo project | Sudo | 1.9.14 ~ 1.9.17p1 | - |
|
II. Public POCs for CVE-2025-32463
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463 | https://github.com/pr0v3rbs/CVE-2025-32463_chwoot | POC Details |
| 2 | None | https://github.com/4f-kira/CVE-2025-32463 | POC Details |
| 3 | CVE-2025-32463 Proof of concept | https://github.com/K1tt3h/CVE-2025-32463-POC | POC Details |
| 4 | None | https://github.com/Adonijah01/cve-2025-32463-lab | POC Details |
| 5 | None | https://github.com/SysMancer/CVE-2025-32463 | POC Details |
| 6 | Local Privilege Escalation to Root via Sudo chroot in Linux | https://github.com/kh4sh3i/CVE-2025-32463 | POC Details |
| 7 | None | https://github.com/neko205-mx/CVE-2025-32463_Exploit | POC Details |
| 8 | Exploit for Local Privilege Escalation in Sudo via Malicious nsswitch.conf with sudo -R. (CVE-2025-32463) | https://github.com/pevinkumar10/CVE-2025-32463 | POC Details |
| 9 | None | https://github.com/zhaduchanhzz/CVE-2025-32463_POC | POC Details |
| 10 | None | https://github.com/robbert1978/CVE-2025-32463_POC | POC Details |
| 11 | Sudo Local Privilege Escalation CVE-2025-32463 (Best For Cases Where the shell is not stable to spawn a new root shell) | https://github.com/Mikivirus0/sudoinjection | POC Details |
| 12 | Sudo chroot privileged escalation PoC | https://github.com/nflatrea/CVE-2025-32463 | POC Details |
| 13 | None | https://github.com/san8383/CVE-2025-32463 | POC Details |
| 14 | None | https://github.com/0xAkarii/CVE-2025-32463 | POC Details |
| 15 | Mr.CIA's manual patching guide for CVE-2025-32463 (Sudo local privilege escalation) on Kali Linux and Ubuntu WSL. | https://github.com/CIA911/sudo_patch_CVE-2025-32463 | POC Details |
| 16 | PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability | https://github.com/mirchr/CVE-2025-32463-sudo-chwoot | POC Details |
| 17 | Privilege escalation exploit for CVE-2025-32463 using a malicious NSS module injected via sudo -R. This version creates a stealth payload called illdeed, granting root access through a controlled chroot environment. | https://github.com/ill-deed/CVE-2025-32463_illdeed | POC Details |
| 18 | # CVE-2025-32463 – Sudo EoP Exploit (PoC) with precompiled .so | https://github.com/zinzloun/CVE-2025-32463 | POC Details |
| 19 | Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒 | https://github.com/yeremeu/CVE-2025-32463_chwoot | POC Details |
| 20 | 🛡️ Proof of Concept (PoC) for CVE-2025-32463 — Local privilege escalation in sudo (versions 1.9.14 to 1.9.17). This exploit abuses the --chroot option and a malicious nsswitch.conf to execute arbitrary code as root. ⚠️ For educational and authorized testing only. | https://github.com/cyberpoul/CVE-2025-32463-POC | POC Details |
| 21 | CVE-2025-32463 | https://github.com/B1ack4sh/Blackash-CVE-2025-32463 | POC Details |
| 22 | Local privilege escalation vulnerability CVE-2025-32463 in Sudo allows users to gain root access. Discover details and solutions on GitHub! 🐙✨ | https://github.com/SkylerMC/CVE-2025-32463 | POC Details |
| 23 | Linux distributions: Affects Ubuntu, Debian, Fedora, CentOS, SUSE, Amazon Linux, and others shipping sudo v1.9.14–1.9.17 | https://github.com/junxian428/CVE-2025-32463 | POC Details |
| 24 | Proof of Concept for CVE-2025-32463 Local privilege escalation exploit targeting sudo -R on vulnerable Linux systems. For educational and authorized security testing only. | https://github.com/FreeDurok/CVE-2025-32463-PoC | POC Details |
| 25 | None | https://github.com/Chocapikk/CVE-2025-32463-lab | POC Details |
| 26 | A PoC exploit for CVE-2025-32463 - Sudo Privilege Escalation | https://github.com/K3ysTr0K3R/CVE-2025-32463-EXPLOIT | POC Details |
| 27 | # cve-2025-32463 - Local Privilege Escalation to Root via Sudo chroot in Linux | https://github.com/SpongeBob-369/cve-2025-32463 | POC Details |
| 28 | None | https://github.com/lowercasenumbers/CVE-2025-32463_sudo_chroot | POC Details |
| 29 | PoC for CVE-2025-32463: Local privilege escalation in sudo via --chroot. Exploits NSS module injection through crafted chroot environments. Designed for security researchers and lab-only environments. | https://github.com/abrewer251/CVE-2025-32463_Sudo_PoC | POC Details |
| 30 | None | https://github.com/0xb0rn3/CVE-2025-32463-EXPLOIT | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-32463
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-32463 (5)
Other References for CVE-2025-32463 (1)
IV. Related Vulnerabilities
V. Comments for CVE-2025-32463
Anonymous User
2026-01-15 06:08:53Zaproxy alias impedit expedita quisquam pariatur exercitationem. Nemo rerum eveniet dolores rem quia dignissimos.