CVE-2026-82474

EUVD-2026-68130
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulnCheckCNA
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 2.35%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
sudo_projectsudo
𝑥
≤ 1.9.17p2
CNA
Debian logo
Debian Releases
Debian Product
Codename
sudo
bookworm
unimportant
bookworm (security)
unimportant
forky
unimportant
sid
unimportant
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sudo
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
Fixed 1.9.15p5-3ubuntu5.24.04.3
released
resolute
Fixed 1.9.17p2-1ubuntu3.1
released
trusty
not-affected
xenial
not-affected
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
sudo
RHEL 9
0:1.9.17p2-3.el9_8.1
fixed
sudo-python-plugin
RHEL 9
0:1.9.17p2-3.el9_8.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
sudo
Azure Linux 3.0
0:1.9.17-3.azl3
fixed
Common Weakness Enumeration
References
https://github.com/sudo-project/sudo
https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c
https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf
https://www.vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat