Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-32463 | Kitploit
Tools/GitHubGitHub/danilo1992-sys/cve-2025-32463
Privilege EscalationVulnerability AnalysisExploitationPenetration TestingLearning & EducationBinary Exploitation
GitHubdanilo1992-sys/cve-2025-32463

CVE-2025-32463

View Repository
6 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-32463: Sudo Privilege Escalation (chroot)

This repository contains information and/or a proof of concept (PoC) about the vulnerability CVE-2025-32463, a critical local privilege escalation flaw in the sudo utility.

📌 Description

The vulnerability allows a local user to gain root access by leveraging the --chroot (or -R) option in vulnerable versions of Sudo. The flaw occurs because Sudo allows loading configuration files (such as /etc/nsswitch.conf) from a user-controlled directory before changing its privileges, which facilitates the loading of malicious libraries.

⚠️ Technical Details

  • CVE ID: CVE-2025-32463
  • Severity: Critical (9.3/10 on CVSS scale)
  • Affected component: Sudo (--chroot functionality)
  • Impact: Local user privilege escalation to Root.

🚀 Affected Versions

  • Sudo versions from 1.9.14 to 1.9.17.
  • The flaw has been fixed in version 1.9.17p1.

🛠️ Mitigation and Solution

The recommended solution is to update the sudo package to the latest version available in your Linux distribution:

How to run the script

root@kitploit:~
chmod +x CVE-2025-32463.sh
root@kitploit:~
./CVE-2025-32463.sh
Download Tool