CVE-2026-82474 — Sudo through 1.9.17p2 Intercept Policy Bypass via execveat
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute den…
Published: 2026-08-29 · CVSS: 8.5 · CVSS 4.0
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7