Is CVE-2026-82474 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82474?

CVE-2026-82474 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-82474

Description

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.