CVE-2025-32462

🗓️ 30 Jun 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 19 Media mentions👁 253 Views

Vulnerability allows users to execute commands on unintended machines with misconfigured sudoers file

Reporter	Title	Published	Views	Family All 277
FreeBSD	sudo -- privilege escalation vulnerability through host and chroot options	1 Apr 202500:00	–	freebsd
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	11 Jul 202507:47	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	25 Dec 202516:42	–	githubexploit
GithubExploit	Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo	5 Jul 202515:55	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	3 Jul 202515:53	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	28 Jul 202504:18	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	4 Jul 202520:04	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	10 Aug 202506:56	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	7 Jul 202511:04	–	githubexploit
IBM Security Bulletins	Security Bulletin: Vulnerability in sudo library (CVE-2025-32462) affects Power HMC.	9 Sep 202507:28	–	ibm

NVD

Vulners

Vulnrichment

CNA

Node

sudo_project sudoRange<1.9.17

sudo_project sudoMatch1.9.17-

[
  {
    "defaultStatus": "unaffected",
    "product": "Sudo",
    "vendor": "Sudo project",
    "versions": [
      {
        "lessThan": "1.9.17p1",
        "status": "affected",
        "version": "1.8.8",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
sudo	www.sudo.ws/security/advisories/
lists	www.lists.debian.org/debian-security-announce/2025/msg00118.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2025-32462
suse	www.suse.com/security/cve/CVE-2025-32462.html
bugs	www.bugs.gentoo.org/show_bug.cgi
stratascale	www.stratascale.com/vulnerability-alert-CVE-2025-32462-sudo-host
secpod	www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/
openwall	www.openwall.com/lists/oss-security/2025/06/30/2
sudo	www.sudo.ws/security/advisories/host_any/
explore	www.explore.alas.aws.amazon.com/CVE-2025-32462.html

14 Jul 2026 13:17Current

7.3High risk

Vulners AI Score7.3

CVSS 3.12.8 - 8.8

EPSS0.03239

SSVC

CWE-863