
Exploit for CVE-2025-32462 enabling privilege escalation by bypassing sudo host restrictions on Linux systems with affected sudo versions and NOPASSWD rights.
This vulnerability was discovered by Rich Mirch.
More details can be found at:
https://cxsecurity.com/issue/WLB-2025070022
This script is an exploit for CVE-2025-32462, allowing privilege escalation by bypassing sudo's host restrictions.
It targets Linux systems with affected versions of sudo and requires that the sudo -h option is accepted with NOPASSWD rights.
This implementation was written by J3rich0123 for educational and CTF purposes.
Credit for discovery remains solely with Rich Mirch.
Run the script to start a pseudo-root shell on a target host defined in TARGET_HOST.
For a full interactive shell, type bash inside the prompt or run vim → :!bash.