In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

🗓️ 02 Oct 2025 06:11:30Reported by MicrosoftType

Sudoedit before 1.9.12p2 allows privilege escalation from extra editor arguments in environment variables.

Reporter	Title	Published	Views	Family All 277
zdt	sudo 1.8.0 to 1.9.12p1 - Privilege Escalation Exploit	3 Apr 202300:00	–	zdt
zdt	Sudoedit Extra Arguments Privilege Escalation Exploit	23 May 202300:00	–	zdt
zdt	Cisco ThousandEyes Enterprise Agent Virtual Appliance Arbitrary File Modification Vulnerability	20 Aug 202300:00	–	zdt
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	30 Jul 202509:48	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	10 Jul 202306:38	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	28 Aug 202414:22	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	6 Aug 202306:46	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	6 Apr 202303:11	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	6 Apr 202303:11	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	20 Jun 202300:38	–	githubexploit