CVE-2025-32463
KEVCRITICAL 9.3EPSS 59.4%
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1
- 9.3 CRITICAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS
- 59.42% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2025-09-29
- Nuclei
- critical · CWE-426
- Published
- 2025-06-30
- Updated
- 2026-02-26
Proof-of-concept exploits (74)
- 0xAkarii/CVE-2025-324630★ · 2025-07-03
- 4f-kira/CVE-2025-324631★ · 2025-07-01
- AdityaBhatt3010/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-3246211★ · 2025-07-21
- ChetanKomal/sudo_exploit0★ · 2025-07-22
- FreeDurok/CVE-2025-32463-PoC5★ · 2025-08-23
- K1tt3h/CVE-2025-32463-POC30★ · 2025-07-01
- K3ysTr0K3R/CVE-2025-32463-EXPLOIT9★ · 2025-07-06
- KaiHT-Ladiant/CVE-2025-324632★ · 2025-08-01
- LSP1025923/CVE0★ · 2025-09-14
- MGunturG/CVE-2025-324630★ · 2025-07-18
- Maalfer/Sudo-CVE-2021-31568★ · 2025-07-19
- MohamedKarrab/CVE-2025-3246348★ · 2025-10-06
- Nowafen/CVE-2025-3246325★ · 2026-08-12
- Rajneeshkarya/CVE-2025-324630★ · 2025-07-17
- Sam7489/sudo-chwoot0★ · 2025-07-03
- SpongeBob-369/cve-2025-324631★ · 2025-07-09
- SysMancer/CVE-2025-324634★ · 2025-07-02
- TH3xACE/SUDO_KILLER2481★ · 2026-03-11
- Yuy0ung/CVE-2025-32463_chwoot3★ · 2025-08-27
- abrewer251/CVE-2025-32463_Sudo_PoC1★ · 2025-07-08
- aldoClau98/CVE-2025-324630★ · 2025-08-05
- ashardev002/CVE-2025-32463_chwoot1★ · 2026-08-31
- behnamvanda/CVE-2025-324634★ · 2025-08-12
- blackcat4347/CVE-2025-32463_PoC0★ · 2025-09-05
- cyberpoul/CVE-2025-32463-POC1★ · 2026-02-17
- daryllundy/CVE-2025-324630★ · 2025-07-20
- hackingyseguridad/root3★ · 2026-07-17
- ill-deed/CVE-2025-32463_illdeed0★ · 2025-07-04
- kh4sh3i/CVE-2025-32463475★ · 2025-07-02
- krypton-0x00/CVE-2025-32463-Chwoot-POC1★ · 2025-07-16
- lowercasenumbers/CVE-2025-32463_sudo_chroot0★ · 2025-11-19
- mirchr/CVE-2025-32463-sudo-chwoot25★ · 2025-07-05
- morgenm/sudo-chroot-CVE-2025-324630★ · 2025-07-11
- neko205-mx/CVE-2025-32463_Exploit0★ · 2025-07-02
- nelissandro/CVE-2025-32463-Sudo-Chroot-Escape0★ · 2025-09-24
- painoob/CVE-2025-324630★ · 2025-08-05
- pevinkumar10/CVE-2025-324633★ · 2025-07-05
- pevinkumar10/CVE-2025-478120★ · 2025-07-08
- pr0v3rbs/CVE-2025-32463_chwoot529★ · 2025-11-19
- robbert1978/CVE-2025-32463_POC0★ · 2025-07-02
- san8383/CVE-2025-324631★ · 2025-07-03
- zhaduchanhzz/CVE-2025-32463_POC0★ · 2025-07-02
- zinzloun/CVE-2025-3246314★ · 2025-07-14
- 0p5cur/CVE-2025-32463-POC
- 0x3c4dfa1/CVE-2025-32463
- 0xBlackash/CVE-2025-32463
- 0xdak/CVE-2025-32463_exploit
- 12bijaya/CVE-2025-32463
- 1xPwn/CVE-2025-32463
- AC8999/CVE-2025-32463
- D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape
- Fomovet/cve-2025-32463
- Mr-Alperen/CVE-2025-32463
- NewComrade12211/CVE-2025-32463
- SpycioKon/CVE-2025-32463
- ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation
- danilo1992-sys/CVE-2025-32463
- dr4x-c0d3r/sudo-chroot
- dr4xp/sudo-chroot
- gmh5225/Blackash-CVE-2025-32463
- khoazero123/CVE-2025-32463
- muhammedkayag/CVE-2025-32463
- r3dBust3r/CVE-2025-32463
- robbin0919/CVE-2025-32463
- secvulnhub/CVE-2025-32463-EXPLOIT
- vpr-labs/CVE-2025-32463
- MAAYTHM/CVE-2025-32462_32463-Lab
- newmie10/564Capstone
- ricardomaia/Unshadow-IT
- sharknet56/MALW
- v3rycl0p3r/CVE-2025-32463
- v3rycl0p3r/linux-root-kit
- wnaspy/CVE-POC-WEAPON
- yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab