Every CVE Search/ Get API key

CVE-2026-82474

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

8.5 HighPublic exploitFix available

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.19%Up 0.1 points since Aug 30, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.5

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Record
CVE-2026-82474
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-693
Updated
2026-11-02
EUVDEUVD-2026-68130 8.5

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Record
EUVD-2026-68130
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-36m7-65w5-jm6c 8.5

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in...

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Record
GHSA-36m7-65w5-jm6c
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-693
Updated
2026-11-02
NVD 8.5

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Record
CVE-2026-82474
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-693
Updated
2026-11-02
OSVBELL-CVE-2026-82474 7.8
Record
BELL-CVE-2026-82474
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 8.5

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Record
CVE-2026-82474
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-693
Updated
2026-11-02
Show 17 moreShow less
OSVDEBIAN-CVE-2026-82474 8.5

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Record
DEBIAN-CVE-2026-82474
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3735 8.5

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.(CVE-2026-82474)

Record
OESA-2026-3735
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3736 8.5

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.(CVE-2026-82474)

Record
OESA-2026-3736
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3962 8.5

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.(CVE-2026-82474)

Record
OESA-2026-3962
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVRHSA-2026:65569 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:65569
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:68692 7.8

Red Hat Security Advisory: sudo security, bug fix, and enhancement update

Record
RHSA-2026:68692
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:69123 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2026:69123
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:71354 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2026:71354
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:68692 7.8

Important: sudo security, bug fix, and enhancement update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: Sudo: Policy bypass allows unauthorized program execution via execveat (CVE-2026-82474)

Bug Fix(es) and Enhancement(s):

  • Use canonicalized path if user path contains ".." (JIRA:Rocky Linux-212546)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:68692
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:69123 7.8

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: Sudo: Policy bypass allows unauthorized program execution via execveat (CVE-2026-82474)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:69123
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-82474 8.5

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Record
UBUNTU-CVE-2026-82474
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:68692 No score

Important: sudo security, bug fix, and enhancement update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: Sudo: Policy bypass allows unauthorized program execution via execveat (CVE-2026-82474)

Bug Fix(es) and Enhancement(s):

  • Use canonicalized path if user path contains ".." (JIRA:AlmaLinux-212546)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:68692
Updated
2026-11-02
OSVALSA-2026:69123 No score

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: Sudo: Policy bypass allows unauthorized program execution via execveat (CVE-2026-82474)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:69123
Updated
2026-11-02
OSVAZL-98225 No score

CVE-2026-82474 affecting package sudo for versions less than 1.9.17-3

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Record
AZL-98225
Updated
2026-11-05
OSVMGASA-2026-0531 No score

Updated sudo package fixes security vulnerabilities

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat. (CVE-2026-82474) tz environment variable allows bypass of notbefore/notafter time-based authorization. (CVE-2026-96512)

Record
MGASA-2026-0531
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-82474 No score

CVE-2026-82474 in sudo - Patched by Root

Root has patched CVE-2026-82474 in the sudo package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-82474
Updated
2026-11-02
OSVUSN-8803-1 No score

sudo vulnerability

Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that Sudo failed to apply intercept policy checks when commands were executed under certain circumstances. A local attacker permitted to run specific commands could possibly use this issue to bypass policy enforcement and logging, executing unauthorized programs.

Record
USN-8803-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sudo
AlmaLinux:10
 before 1.9.17-10.p2.el10_2.6
1.9.17-10.p2.el10_2.6
sudo-python-plugin
AlmaLinux:10
 before 1.9.17-10.p2.el10_2.6
1.9.17-10.p2.el10_2.6
sudo
AlmaLinux:9
 before 1.9.17p2-3.el9_8.1
1.9.17p2-3.el9_8.1
sudo-python-plugin
AlmaLinux:9
 before 1.9.17p2-3.el9_8.1
1.9.17p2-3.el9_8.1
sudo
Azure Linux:3
 before 1.9.17-3
1.9.17-3
sudo
Alpaquita:23
 1.9.12_p1-r1 up to 1.9.15_p5-r3
1.9.15_p5-r3
sudo
Alpaquita:25
 1.9.16_p2-r1 up to 1.9.17_p2-r2
1.9.17_p2-r2
sudo
Alpaquita:stream
 1.9.13_p3-r0 up to 1.9.17_p2-r2
1.9.17_p2-r2
sudo
Debian:12
 All versions, plus listed versions
1.9.13p3-11.9.13p3-1+deb12u11.9.13p3-1+deb12u21.9.13p3-1+deb12u31.9.13p3-1+deb12u4
Show 29 moreShow less
1.9.13p3-21.9.13p3-31.9.14p2-11.9.15p2-11.9.15p2-21.9.15p3-11.9.15p4-11.9.15p4-21.9.15p5-11.9.15p5-21.9.15p5-31.9.15p5-3+hurd.11.9.16-11.9.16-21.9.16p1-11.9.16p2-11.9.16p2-21.9.16p2-31.9.17p1-11.9.17p2-11.9.17p2-1exp11.9.17p2-21.9.17p2-31.9.17p2-41.9.17p2-51.9.17p2-61.9.17p2-71.9.17p2-81.9.17p2-9
 None known
sudo
Debian:13
 All versions, plus listed versions
1.9.16p2-31.9.16p2-3+deb13u11.9.16p2-3+deb13u21.9.17p1-11.9.17p2-1
Show 9 moreShow less
1.9.17p2-1exp11.9.17p2-21.9.17p2-31.9.17p2-41.9.17p2-51.9.17p2-61.9.17p2-71.9.17p2-81.9.17p2-9
 None known
Show 33 moreShow less
Affected packages
PackageAffectedFixed
sudo
Debian:14
 All versions, plus listed versions
1.9.16p2-31.9.17p1-11.9.17p2-11.9.17p2-1exp11.9.17p2-2
Show 7 moreShow less
1.9.17p2-31.9.17p2-41.9.17p2-51.9.17p2-61.9.17p2-71.9.17p2-81.9.17p2-9
 None known
sudo
Mageia:10
From an advisory covering 2 CVEs
 before 1.9.17p1-2.1.mga10
1.9.17p1-2.1.mga10
sudo
openEuler:24.03-LTS-SP1
 before 1.9.15p5-8.oe2403sp1
1.9.15p5-8.oe2403sp1
sudo
openEuler:24.03-LTS-SP4
 before 1.9.15p5-8.oe2403sp4
1.9.15p5-8.oe2403sp4
sudo
openEuler:24.03-LTS-SP3
 before 1.9.15p5-8.oe2403sp3
1.9.15p5-8.oe2403sp3
sudo
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.9.17-16.p2.1.hum1
0:1.9.17-16.p2.1.hum1
sudo-devel
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.9.17-16.p2.1.hum1
0:1.9.17-16.p2.1.hum1
sudo-logsrvd
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.9.17-16.p2.1.hum1
0:1.9.17-16.p2.1.hum1
sudo-python-plugin
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:1.9.17-16.p2.1.hum1
0:1.9.17-16.p2.1.hum1
sudo-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:1.9.17-10.p2.el10_2.6
0:1.9.17-10.p2.el10_2.6
sudo-debugsource
Red Hat:enterprise_linux:10.2
 before 0:1.9.17-10.p2.el10_2.6
0:1.9.17-10.p2.el10_2.6
sudo-python-plugin
Red Hat:enterprise_linux:10.2
 before 0:1.9.17-10.p2.el10_2.6
0:1.9.17-10.p2.el10_2.6
sudo-python-plugin-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:1.9.17-10.p2.el10_2.6
0:1.9.17-10.p2.el10_2.6
sudo
Red Hat:enterprise_linux:10.2
 before 0:1.9.17-10.p2.el10_2.6
0:1.9.17-10.p2.el10_2.6
sudo-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.17p2-3.el9_8.1
0:1.9.17p2-3.el9_8.1
sudo-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.17p2-3.el9_8.1
0:1.9.17p2-3.el9_8.1
sudo-python-plugin
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.17p2-3.el9_8.1
0:1.9.17p2-3.el9_8.1
sudo-python-plugin-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.17p2-3.el9_8.1
0:1.9.17p2-3.el9_8.1
sudo
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.17p2-3.el9_8.1
0:1.9.17p2-3.el9_8.1
sudo-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.17p2-3.el9_8.1
0:1.9.17p2-3.el9_8.1
sudo-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.17p2-3.el9_8.1
0:1.9.17p2-3.el9_8.1
sudo-python-plugin-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.17p2-3.el9_8.1
0:1.9.17p2-3.el9_8.1
sudo-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:1.9.15-8.p5.el10_0.4
0:1.9.15-8.p5.el10_0.4
sudo-debugsource
Red Hat:enterprise_linux_eus:10.0
 before 0:1.9.15-8.p5.el10_0.4
0:1.9.15-8.p5.el10_0.4
sudo-python-plugin
Red Hat:enterprise_linux_eus:10.0
 before 0:1.9.15-8.p5.el10_0.4
0:1.9.15-8.p5.el10_0.4
sudo-python-plugin-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:1.9.15-8.p5.el10_0.4
0:1.9.15-8.p5.el10_0.4
sudo
Red Hat:enterprise_linux_eus:10.0
 before 0:1.9.15-8.p5.el10_0.4
0:1.9.15-8.p5.el10_0.4
sudo
Rocky Linux:10
 before 0:1.9.17-10.p2.el10_2.6
0:1.9.17-10.p2.el10_2.6
sudo
Rocky Linux:9
 before 0:1.9.17p2-3.el9_8.1
0:1.9.17p2-3.el9_8.1
sudo
Root:Debian:11
 before 1.9.5p2-3+deb11u4.aikido.8
1.9.5p2-3+deb11u4.aikido.8
rootio-sudo
Root:Debian:11
 before 1.9.5p2-3+deb11u4.aikido.8
1.9.5p2-3+deb11u4.aikido.8
sudo
Ubuntu:24.04:LTS
 before 1.9.15p5-3ubuntu5.24.04.3, plus listed versions
1.9.14p2-1ubuntu11.9.15p5-3ubuntu11.9.15p5-3ubuntu31.9.15p5-3ubuntu41.9.15p5-3ubuntu51.9.15p5-3ubuntu5.24.04.11.9.15p5-3ubuntu5.24.04.2
1.9.15p5-3ubuntu5.24.04.3
sudo
Ubuntu:26.04:LTS
 before 1.9.17p2-1ubuntu3.1, plus listed versions
1.9.17p2-1ubuntu11.9.17p2-1ubuntu21.9.17p2-1ubuntu3
1.9.17p2-1ubuntu3.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubpaktiko1986/CVE-2026-824742026-11-02

History

History
RecordedChangedSources
affectedOSV
exploits, factsPoC in GitHub
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-82474 is a high vulnerability (CVSS 8.5) in Sudo Project Sudo, published August 29, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 9th percentile. Fixed in sudo 1.9.17-10.p2.el10_2.6.

References

Show 40 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open