Search/Organizations Warned of Exploited Sudo Vulnerability
● News

Organizations Warned of Exploited Sudo Vulnerability

The US cybersecurity agency CISA on Monday warned that a recently patched local privilege escalation vulnerability in Sudo has been exploited in the wild. A command-line utility for Linux and macOS, Sudo enables specified users to execute commands with root or administrator privileges without having to log in as superuser. A Windows implementation of the Sudo concept also exists, but it is not a fork or port of the Unix project. Because of the elevated temporary access that Sudo provides on Linux and macOS, only users configured in a sudoers file are permitted to execute commands via Sudo. The security defect flagged as exploited by CISA, tracked as CVE-2025-32463 (CVSS score of 9.3), allows any user to execute commands using Sudo, even if they are not configured in the sudoers file.…

Read original article
Source
securityweek.com
Published
Sep 30, 2025
Mentions
9
language: en
Connections
10 relationships