CVE-2025-32462_32463-Lab

CVE-2025-32462 & CVE-2025-32463 – PoC Lab This is a container-based lab and PoC for the following vulnerabilities in sudo: CVE-2025-32462 – sudo -h host matching logic bypass CVE-2025-32463 – sudo -R chroot NSS library escape 🔒 For educational purposes only. Do not use on systems you don’t own or...

CVE-2025-32463-POC

CVE-2025-32463 – Sudo chroot Privilege Escalation PoC This repository contains a proof-of-concept PoC exploit for CVE-2025-32463, a local privilege escalation vulnerability in sudo versions 1.9.14 through 1.9.17. The vulnerability allows a local unprivileged user to escalate privileges to root by...

CVE-2025-32463

CVE-2025-32463 Is a local privilege escalation vulnerability affecting vulnerable versions of sudo. The flaw abuses the sudo -R chroot feature together with the Linux Name Service Switch NSS mechanism to force sudo into loading an attacker-controlled shared library as root. By manipulating...