CVE-2025-32463

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Affected

Sudo project · Sudo

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 MITRE

9.3 CRITICALCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

55.50% chance of exploitation in the next 30 days, 99th percentile

CISA KEV

added 2025-09-29

Nuclei

critical · CWE-426

Published

2025-06-30

Updated

2026-02-26

Proof-of-concept exploits (75)

• 0xAkarii/CVE-2025-324630★ · 2025-07-03
• 4f-kira/CVE-2025-324631★ · 2025-07-01
• AdityaBhatt3010/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-3246211★ · 2025-07-21
• ChetanKomal/sudo_exploit0★ · 2025-07-22
• FreeDurok/CVE-2025-32463-PoC5★ · 2025-08-23
• K1tt3h/CVE-2025-32463-POC30★ · 2025-07-01
• KaiHT-Ladiant/CVE-2025-324632★ · 2025-08-01
• LSP1025923/CVE0★ · 2025-09-14
• MGunturG/CVE-2025-324630★ · 2025-07-18
• Maalfer/Sudo-CVE-2021-31568★ · 2025-07-19
• MohamedKarrab/CVE-2025-3246348★ · 2025-10-06
• Nowafen/CVE-2025-3246326★ · 2026-08-12
• Rajneeshkarya/CVE-2025-324630★ · 2025-07-17
• Sam7489/sudo-chwoot0★ · 2025-07-03
• SpongeBob-369/cve-2025-324631★ · 2025-07-09
• SysMancer/CVE-2025-324634★ · 2025-07-02
• TH3xACE/SUDO_KILLER2487★ · 2026-03-11
• Yuy0ung/CVE-2025-32463_chwoot3★ · 2025-08-27
• abrewer251/CVE-2025-32463_Sudo_PoC1★ · 2025-07-08
• aldoClau98/CVE-2025-324630★ · 2025-08-05
• ashardev002/CVE-2025-32463_chwoot2★ · 2026-10-13
• behnamvanda/CVE-2025-324634★ · 2025-08-12
• blackcat4347/CVE-2025-32463_PoC0★ · 2025-09-05
• cyberpoul/CVE-2025-32463-POC1★ · 2026-02-17
• daryllundy/CVE-2025-324630★ · 2025-07-20
• hackingyseguridad/root3★ · 2026-07-17
• ill-deed/CVE-2025-32463_illdeed0★ · 2025-07-04
• kh4sh3i/CVE-2025-32463476★ · 2025-07-02
• krypton-0x00/CVE-2025-32463-Chwoot-POC1★ · 2025-07-16
• lowercasenumbers/CVE-2025-32463_sudo_chroot0★ · 2025-11-19
• mirchr/CVE-2025-32463-sudo-chwoot25★ · 2025-07-05
• morgenm/sudo-chroot-CVE-2025-324630★ · 2025-07-11
• neko205-mx/CVE-2025-32463_Exploit0★ · 2025-07-02
• nelissandro/CVE-2025-32463-Sudo-Chroot-Escape0★ · 2025-09-24
• painoob/CVE-2025-324630★ · 2025-08-05
• pevinkumar10/CVE-2025-324633★ · 2025-07-05
• pevinkumar10/CVE-2025-478120★ · 2025-07-08
• pr0v3rbs/CVE-2025-32463_chwoot530★ · 2025-11-19
• robbert1978/CVE-2025-32463_POC0★ · 2025-07-02
• san8383/CVE-2025-324631★ · 2025-07-03
• zhaduchanhzz/CVE-2025-32463_POC0★ · 2025-07-02
• zinzloun/CVE-2025-3246314★ · 2025-07-14
• 0p5cur/CVE-2025-32463-POC1★ · 2026-02-17
• 0x3c4dfa1/CVE-2025-324630★ · 2025-10-08
• 0xBlackash/CVE-2025-324630★ · 2026-03-05
• 0xdak/CVE-2025-32463_exploit0★ · 2026-08-04
• 12bijaya/CVE-2025-324631★ · 2025-07-03
• 1xPwn/CVE-2025-3246326★ · 2026-08-12
• AC8999/CVE-2025-324630★ · 2025-09-30
• D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape0★ · 2025-09-24
• Fomovet/cve-2025-324630★ · 2026-06-21
• Mr-Alperen/CVE-2025-324630★ · 2025-12-25
• NewComrade12211/CVE-2025-324631★ · 2025-11-03
• SpycioKon/CVE-2025-324630★ · 2026-02-05
• ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation0★ · 2025-11-17
• danilo1992-sys/CVE-2025-324630★ · 2026-02-22
• dr4x-c0d3r/sudo-chroot1★ · 2025-10-17
• dr4xp/sudo-chroot1★ · 2025-12-09
• gmh5225/Blackash-CVE-2025-324630★ · 2025-07-04
• khoazero123/CVE-2025-324630★ · 2025-07-14
• muhammedkayag/CVE-2025-324630★ · 2025-10-30
• r3dBust3r/CVE-2025-324631★ · 2025-10-07
• robbin0919/CVE-2025-324630★ · 2025-10-26
• secvulnhub/CVE-2025-32463-EXPLOIT1★ · 2026-04-23
• vpr-labs/CVE-2025-324630★ · 2026-02-20
• MAAYTHM/CVE-2025-32462_32463-Lab5★ · 2025-07-07
• newmie10/564Capstone1★ · 2026-05-06
• ricardomaia/Unshadow-IT0★ · 2026-02-28
• sharknet56/MALW1★ · 2025-12-24
• v3rycl0p3r/CVE-2025-324630★ · 2026-05-10
• v3rycl0p3r/linux-root-kit0★ · 2026-05-10
• wnaspy/CVE-POC-WEAPON0★ · 2026-06-14
• yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab2★ · 2026-03-05
• klvlo/CVE-2025-324631★ · 2026-09-29
• y4ney/CVE-2025-32463-lab/blob/5bc95905db9656c1053c0cd7a34e4edbee17bbb6/docker/sudo-chwoot…4★ · 2025-08-19

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-32463.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/sudo_chroot_cve_2025…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52352

Security advisories

• https://www.sudo.ws/security/advisories
• https://www.sudo.ws/security/advisories/chroot_bug
• https://access.redhat.com/security/cve/cve-2025-32463
• https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463
• https://explore.alas.aws.amazon.com/CVE-2025-32463.html
• https://iototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hackers-to-ele…
• https://security-tracker.debian.org/tracker/CVE-2025-32463
• https://ubuntu.com/security/notices/USN-7604-1
• https://www.openwall.com/lists/oss-security/2025/06/30/3
• https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about…
• https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot
• https://www.suse.com/security/cve/CVE-2025-32463.html
• https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1
• https://www.vicarius.io/vsociety/posts/cve-2025-32463-detect-sudo-vulnerability
• https://www.vicarius.io/vsociety/posts/cve-2025-32463-mitigate-sudo-vulnerability
• https://www.sudo.ws/releases/changelog

References

• CVE Record
• NVD entry

Related

• CVE-2025-10585
• CVE-2025-32462
• CVE-2025-49706
• CVE-2025-53770
• CVE-2025-54253
• CVE-2025-54794