CVE-2025-32462

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS v3.1

2.8 LOWCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N

EPSS

4.28% chance of exploitation in the next 30 days, 90th percentile

Published

2025-06-30

Updated

2026-07-14

Proof-of-concept exploits (14)

• AdityaBhatt3010/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-3246211★ · 2025-07-21
• CryingN/CVE-2025-3246213★ · 2026-05-06
• SpongeBob-369/cve-2025-324623★ · 2025-07-08
• Tan-JunWei/Ethically_Hacking2★ · 2025-08-16
• cyberpoul/CVE-2025-32462-POC8★ · 2026-02-17
• cybersentinelx1/CVE-2025-32462-Exploit1★ · 2025-07-03
• j3r1ch0123/CVE-2025-324621★ · 2025-07-28
• mylovem313/CVE-2025-324620★ · 2025-07-03
• 0p5cur/CVE-2025-32462-POC
• MAAYTHM/CVE-2025-32462_32463-Lab
• OffSecPlaybook/CVE-2025-32462-
• yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab
• hackingyseguridad/root3★ · 2026-07-17
• v3rycl0p3r/linux-root-kit

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/sudo_chroot_cve_2025…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52354

References

• CVE Record
• NVD entry

Related

• CVE-2025-10585
• CVE-2025-32463
• CVE-2025-49706
• CVE-2025-53770
• CVE-2025-54253
• CVE-2025-54794