PoC Published for Sudo Flaw Lets Attackers Escalate to Root

A PoC exploit has been released for CVE-2025-32463, a critical local privilege escalation vulnerability in the Sudo binary that could allow attackers to gain root access on Linux systems. The flaw was discovered by security researcher Rich Mirch and has drawn considerable attention from the cybersecurity community. The vulnerability affects Sudo versions 1.9.14 through 1.9.17 and specifically targets the chroot functionality, enabling local users with low-level privileges to escalate their access.

Security researcher Mohsen Khashei has published a complete PoC exploit on GitHub, which has already attracted over 200 stars and nearly 30 forks. The patched version is Sudo 1.9.17p1 and later releases, and organisations running the affected versions are urged to update promptly. In addition to applying the patch, security teams are advised to consider controls such as AppArmor or SELinux and to monitor for abnormal Sudo invocations as part of a broader mitigation strategy.