CVE-2025-32463: Root Escalation in Sudo with --chroot

CVE-2025-32463 is a local privilege escalation vulnerability in Sudo versions before 1.9.17p1. The flaw exploits how Sudo handles /etc/nsswitch.conf when the --chroot option is used: the application reads the configuration from a user-controlled directory, allowing a local attacker to gain root access.

The CVSS score is 9.3, classified as critical. The vulnerability was published on NVD on June 30, 2025. A GitHub repository is recorded to contain proof-of-concept code for CVE-2025-32463, indicating that exploit code is publicly available and may already be known to potential attackers.

System administrators must update Sudo to version 1.9.17p1 or later. Immediately verify which version of Sudo is running on enterprise systems: the command 'sudo --version' provides this information. On vulnerable versions, restrict access to the --chroot option and monitor system logs for privilege escalation attempts until patching is complete.