Privilege Escalation Vulnerability in Sudo from Sudo Project

CVE-2026-35535

What is CVE-2026-35535?

In versions of Sudo prior to a critical patch, a flaw exists where the failure of a setuid, setgid, or setgroups call during a privilege drop is not treated as a fatal error. This oversight can potentially allow unauthorized users to escalate their privileges, compromising system security and integrity. It is vital for organizations using this software to assess their risk and apply appropriate updates.

References