Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sudoUpgrade sudo-python-plugin | Jul 2, 2025 | Jun 30, 2025 |
| Alpine Linux | — | Upgrade sudo | Aug 8, 2025 | Jun 30, 2025 |
| Amazon Linux Ami 2 | — | Upgrade sudo-debuginfoUpgrade sudoUpgrade sudo-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade sudo-python-plugin-debuginfoUpgrade sudo-develUpgrade sudoUpgrade sudo-logsrvd-debuginfoUpgrade sudo-logsrvdUpgrade sudo-python-pluginUpgrade sudo-debuginfoUpgrade sudo-debugsource | Jul 11, 2025 | Jun 30, 2025 |
| Apple Osx Sudo | — | Upgrade macOS to the latest version | Nov 28, 2025 | Nov 28, 2025 |
| Debian | — | Upgrade sudo | Jul 2, 2025 | Jun 30, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade sudo-sssdUpgrade sudo | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade app-admin/sudo. | Jul 2, 2025 | Jun 30, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sudo | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sudo | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade sudo | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade sudo | Oct 24, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sudo | Sep 15, 2025 | Aug 9, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 26, 2025 |
| Oracle_linux | — | Upgrade sudoUpgrade sudo-python-pluginUpgrade sudo-devel | Jul 2, 2025 | Jun 30, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Jun 30, 2025 |
| Redhat_linux | — | Upgrade sudo-develUpgrade sudo-debugsourceUpgrade sudo-python-plugin-debuginfoUpgrade sudo-python-pluginUpgrade sudoUpgrade sudo-debuginfo | Jul 2, 2025 | Jun 30, 2025 |
| Rocky_linux | — | Upgrade sudo-debugsourceUpgrade sudo-debuginfoUpgrade sudoUpgrade sudo-python-pluginUpgrade sudo-python-plugin-debuginfo | Oct 6, 2025 | Oct 4, 2025 |
| Suse | — | Upgrade sudoUpgrade sudo-policy-wheel-auth-selfUpgrade sudo-plugin-pythonUpgrade sudo-develUpgrade sudo-testUpgrade sudo-policy-sudo-auth-selfUpgrade system-group-sudo | Dec 5, 2025 | Jul 2, 2025 |
| Ubuntu | — | Upgrade sudo (Ubuntu Pro)Upgrade sudoUpgrade sudo-ldapUpgrade sudo-ldap (Ubuntu Pro) | Jul 1, 2025 | Jun 30, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub