Skip to content
OpenAdvisories
High USN-8803-1 1 CVE

sudo vulnerability

Published Sep 22, 2026 · Updated Sep 23, 2026

Ecosystem: Ubuntu

Summary

Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that Sudo failed to
apply intercept policy checks when commands were executed under certain
circumstances. A local attacker permitted to run specific commands could
possibly use this issue to bypass policy enforcement and logging, executing
unauthorized programs.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 24.04 LTS 24.04:LTS sudo 1.9.15p5-3ubuntu5.24.04.3
Ubuntu · 26.04 LTS 26.04:LTS sudo 1.9.17p2-1ubuntu3.1

Vulnerabilities 1

  • High 7.8
    CVE-2026-82474 Public exploit

    Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

    Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enf…

    sudo-project sudo sudo sudo Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2026-82474