CVE-2025-32463 — Sudo 1.9.14 → 1.9.17 Local Privilege Escalation via chroot

Exploit script demonstrating a local privilege escalation affecting certain Sudo 1.9.x releases (CVE-2025-32463).

• Exploit reference: https://www.exploit-db.com/exploits/52352
• Tested on: Ubuntu 24.04.2 LTS with sudo 1.9.16p2

Summary

This repository contains an exploit script for CVE-2025-32463, a local privilege escalation involving chroot behavior in affected sudo versions (1.9.14 through 1.9.17). Use this repository only for defensive research, patch validation, or authorized penetration testing on systems you own or have explicit permission to test.

IMPORTANT — Legal & Safety Notice

This code is potentially dangerous. Do not run it on systems for which you do not have explicit authorization. Misuse may be illegal and/or cause data loss. By using the contents of this repository you agree that you are responsible for any consequences. If you are testing, do so in an isolated lab or VM snapshot you can restore.

If you discover this vulnerability in a production environment, follow responsible disclosure best practices: contact the vendor or the maintainers and give them time to respond before public exploitation.

Prerequisites

• A vulnerable sudo version (e.g., 1.9.14 → 1.9.17). Verify local sudo version before testing.
• A Linux system where you have a local account (the exploit is for local privilege escalation).
• Recommended: test inside a VM or container and have snapshots or backups.

Quick Usage

# clone the repo
git clone https://github.com/r3dBust3r/CVE-2025-32463.git
cd CVE-2025-32463

# make the exploit script executable
chmod +x ./CVE-2025-32463

# run the exploit (only on authorized/test systems)
./CVE-2025-32463