CVE-2025-32463 — AI Deep Analysis Summary

🚨 **Essence**: A critical Local Privilege Escalation (LPE) flaw in `sudo`'s `--chroot` feature.…

🛡️ **Root Cause**: **CWE-829** (Inclusion of Functionality from Untrusted Control Sector). <br>🔍 **The Flaw**: Unsafe interaction between `chroot()` and **Name Service Switch (NSS)** lookups.…

📦 **Affected**: **Sudo project** (Product: Sudo). <br>📅 **Versions**: **1.9.14 through 1.9.17p1** (specifically vulnerable versions like 1.9.15p5). <br>🐧 **OS**: Linux/Unix systems using these sudo versions.

👑 **Privileges**: **Root Access** (Full System Control). <br>📂 **Data**: Complete read/write/execute access to the entire system. <br>⚠️ **Note**: Exploitation works even if the user has **NO sudo rules** defined!

🔓 **Threshold**: **LOW**. <br>👤 **Auth**: Requires **Local User Access** (Physical or SSH login). <br>⚙️ **Config**: No special sudo privileges needed. Just need to run `sudo -R` (chroot).…

💣 **Public Exploit**: **YES**. <br>🔗 **PoCs Available**: Multiple GitHub repos (e.g., `CVE-2025-32463_chwoot`, `CVE-2025-32463-POC`). <br>🚀 **Status**: Active exploitation possible.…

🔍 **Self-Check**: <br>1. Run `sudo -v` or check `sudo --version`. <br>2. Verify version is **< 1.9.17p1**. <br>3. Check if `--chroot` (`-R`) is available in your sudo build. <br>4.…

🩹 **Fix**: **YES**. <br>📢 **Official Patch**: Released by Sudo project. <br>🔗 **Reference**: [sudo.ws/security/advisories/chroot_bug](https://www.sudo.ws/security/advisories/chroot_bug/).…

🚧 **Workaround (No Patch)**: <br>1. **Disable `--chroot`**: Remove `sudo -R` capability from sudoers if possible. <br>2.…

🔥 **Urgency**: **CRITICAL / IMMEDIATE**. <br>⏱️ **Priority**: **P0**. <br>💡 **Why**: CVSS 9.8, easy local exploit, no auth bypass needed (just local login), and public PoCs exist.…