CVE-2025-32463

Is a local privilege escalation vulnerability affecting vulnerable versions of sudo. The flaw abuses the sudo -R chroot feature together with the Linux Name Service Switch (NSS) mechanism to force sudo into loading an attacker-controlled shared library as root. By manipulating nsswitch.conf inside a crafted chroot environment, an attacker can execute arbitrary code with root privileges and spawn a root shell.

chwoot.sh

Demonstrates how the vulnerability works. It creates a fake root filesystem, injects a malicious NSS module and triggers the vulnerable sudo behavior to acheive privilege escalation through shared library loading and constructor execution.