CVE-2026-82474 in sudoinfo

Summary

by MITRE • 08/29/2026

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsible

VulnCheck

Reservation

08/29/2026

Disclosure

08/29/2026

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

very low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!