EUVD-2026-18571
GHSA-g5fc-f834-rcr2
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Tags
Description
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
Analysis
Privilege escalation to root in Sudo ≤1.9.17p2 occurs when setuid/setgid/setgroups system calls fail during the mailer privilege-drop sequence, allowing local attackers with high complexity exploitation to gain full system control. Confirmed actively exploited (CISA KEV). …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Inventory all systems running Sudo ≤1.9.17p2 using 'sudo --version' and isolate or restrict local user access on critical systems. Within 7 days: Review sudo configuration files for mailer settings (especially in sudoers); disable the mailer feature if not operationally required, or restrict sudo execution via AppArmor/SELinux profiles to limit privilege escalation impact. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today