CVE-2026-82474 | BDVDB-2026-366289 Detail

Description#

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-29Record published in the CVE List.
2. Version 22026-09-02Most recent update recorded in the CVE List.