ankitpandey383/cve-2025-32463-sudo-privilege-escalationPractical security research project exploiting CVE-2025-32463 to gain root access on a vulnerable sudo version. Includes write-up, PoC, and mitigation steps.
✔️ Completed on HackViser (VIP Challenge)
This repository contains a working exploit for CVE-2025-32463, a critical vulnerability (CVSS 9.3) affecting sudo versions 1.9.14 → 1.9.17 that allows local privilege escalation to ROOT by abusing the --chroot (-R) option.
The exploit abuses a shared library load via libnss_ inside a temporary chroot environment to execute an arbitrary command as root.
| Field | Details |
|---|---|
| CVE | CVE-2025-32463 |
| Affected Versions | sudo 1.9.14 – 1.9.17 |
| Fixed Version | 1.9.17p1 |
| Severity | Critical (9.3 CVSS) |
| Attack Vector | Local |
| Impact | Full Root Privilege Escalation |
| Mitigation | Upgrade / Disable chroot option |
Task:
Gain root access on the target machine and retrieve the flag from:
1️⃣ SSH into the target machine
2️⃣ Move into /tmp (writeable location)
3️⃣ Create exploit file
4️⃣ Paste the exploit (script below) Save ➝ Ctrl+X ➝ Y ➝ Enter 5️⃣ Make executable chmod +x run.sh 6️⃣ Run exploit ./run.sh 7️⃣ Verify root access id whoami 8️⃣ Read the flag cat /secret.txt
