Vulnerability · Published Aug 29, 2026 · Assigned by VulnCheck
CVE-2026-82474Sudo through 1.9.17p2 Intercept Policy Bypass via execveat
High 7.8
In plain English
A high-severity security flaw in sudo from sudo-project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | sudo | 1.9.17-10.p2.el10_2.6 | ALSA-2026:68692 |
| AlmaLinux:9 | sudo | 1.9.17p2-3.el9_8.1 | ALSA-2026:69123 |
| AlmaLinux:10 | sudo-python-plugin | 1.9.17-10.p2.el10_2.6 | ALSA-2026:68692 |
| AlmaLinux:9 | sudo-python-plugin | 1.9.17p2-3.el9_8.1 | ALSA-2026:69123 |
| Debian:12 | sudo | no fix listed | DEBIAN-CVE-2026-82474 |
| Debian:13 | sudo | no fix listed | DEBIAN-CVE-2026-82474 |
| Debian:14 | sudo | no fix listed | DEBIAN-CVE-2026-82474 |
| Rocky Linux:10 | sudo | 0:1.9.17-10.p2.el10_2.6 | RLSA-2026:68692 |
| Rocky Linux:9 | sudo | 0:1.9.17p2-3.el9_8.1 | RLSA-2026:69123 |
| Ubuntu:24.04:LTS | sudo | 1.9.15p5-3ubuntu5.24.04.3 | USN-8803-1 |
| Ubuntu:24.04:LTS | sudo | 1.9.15p5-3ubuntu5.24.04.3 | UBUNTU-CVE-2026-82474 |
| Ubuntu:26.04:LTS | sudo | 1.9.17p2-1ubuntu3.1 | UBUNTU-CVE-2026-82474 |
| Ubuntu:26.04:LTS | sudo | 1.9.17p2-1ubuntu3.1 | USN-8803-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| sudo-project | sudo | 0 – through 1.9.17p2 |
Weakness: CWE-693 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- Patch Commit patch
- https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c technical-description
- https://github.com/sudo-project/sudo product
- VulnCheck Advisory: Sudo through 1.9.17p2 Intercept Policy Bypass via execveat third-party-advisory