Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 29/09/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| sudo | = 1.9.17≥ 1.9.14, < 1.9.17 | 1.9.17 |
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free