Sudo through 1.9.17p2 fails to enforce intercept policy checks on the execveat system call in ptrace‑based intercept mode. The flaw allows users who are granted sudo rights for specific commands to execute any program, including those normally denied, by invoking execveat directly or via fexecve, thereby bypassing both command restrictions and audit logging. As a result, an attacker can elevate privileges beyond the intended scope of the sudo configuration, compromising confidentiality, integrity, and availability of the affected system.

The vulnerability is present in the sudo project’s sudo application up to and including version 1.9.17p2. All systems running these or older releases without the subsequent patch are susceptible. No other products are affected according to the CNA data.

With a CVSS score of 8.5, the flaw is classified as high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, but the lack of a public exploit does not diminish its risk to any system where a local user has sudo privileges. The attack vector is local; an attacker must be able to execute sudo commands, yet the vulnerability permits bypassing the configured command restrictions, effectively giving privilege escalation. The exploitation requires normal sudo access and the use of execveat or fexecve functions, which can be readily invoked by a malicious user with minimal technical effort.