{"id":"CVE-2026-82474","summary":"Sudo through 1.9.17p2 Intercept Policy Bypass via execveat","details":"Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.","modified":"2026-08-31T08:16:47.138777Z","published":"2026-08-29T16:35:33.836Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-693"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82474.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82474.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82474"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat"},{"type":"FIX","url":"https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf"},{"type":"PACKAGE","url":"https://github.com/sudo-project/sudo"},{"type":"ARTICLE","url":"https://github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/sudo-project/sudo","events":[{"introduced":"0"},{"fixed":"d1b48c651cec19fe37d1f0d3299d2283fb0f88e4"},{"fixed":"71fbe42dcd5a1c8f799540583a2dfb2ae6221edf"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.9.17p2"}],"source":["DESCRIPTION","REFERENCES"]}}],"versions":["v1.9.17p1","v1.9.17","v1.9.16p2","SUDO_1_9_16p2","v1.9.16p1","SUDO_1_9_16p1","v1.9.16","SUDO_1_9_16","v1.9.15p5","SUDO_1_9_15p5","v1.9.15p4","SUDO_1_9_15p4","v1.9.15p3","SUDO_1_9_15p3","v1.9.15p2","SUDO_1_9_15p2","v1.9.15p1","SUDO_1_9_15p1","v1.9.15","SUDO_1_9_15","v1.9.14p3","SUDO_1_9_14p3","v1.9.14p2","SUDO_1_9_14p2","v1.9.14p1","SUDO_1_9_14p1","v1.9.14","SUDO_1_9_14","v1.9.13p3","SUDO_1_9_13p3","TAG","v1.9.13p2","SUDO_1_9_13p2","v1.9.13p1","SUDO_1_9_13p1","v1.9.13","SUDO_1_9_13","v1.9.12p2","SUDO_1_9_12p2","v1.9.12p1","SUDO_1_9_12p1","v1.9.12","SUDO_1_9_12","v1.9.11p3","SUDO_1_9_11p3","v1.9.11p2","SUDO_1_9_11p2","v1.9.11p1","SUDO_1_9_11p1","v1.9.11","SUDO_1_9_11","v1.9.10","SUDO_1_9_10","v1.9.9","SUDO_1_9_9","v1.9.8p2","SUDO_1_9_8p2","v1.9.8p1","SUDO_1_9_8p1","v1.9.8","SUDO_1_9_8","v1.9.7p2","SUDO_1_9_7p2","v1.9.7p1","SUDO_1_9_7p1","v1.9.7","SUDO_1_9_7","v1.9.6p1","SUDO_1_9_6p1","v1.9.6","SUDO_1_9_6","v1.9.5p2","SUDO_1_9_5p2","v1.9.5p1","SUDO_1_9_5p1","v1.9.5","SUDO_1_9_5","v1.9.4p2","SUDO_1_9_4p2","v1.9.4p1","SUDO_1_9_4p1","v1.9.4","SUDO_1_9_4","v1.9.3p1","SUDO_1_9_3p1","v1.9.3","SUDO_1_9_3","v1.9.2","SUDO_1_9_2","v1.9.1","SUDO_1_9_1","v1.9.0","SUDO_1_9_0","v1.8.0","SUDO_1_8_0","v1.7.2","SUDO_1_7_2","v1.7.1","SUDO_1_7_1","v1.7.0","SUDO_1_7_0","v1.6.8p1","SUDO_1_6_8p1","v1.6.8","SUDO_1_6_8","v1.6.7","SUDO_1_6_7","v1.6.6","SUDO_1_6_6","v1.6.5","SUDO_1_6_5","v1.6.4","SUDO_1_6_4","v1.6.3","SUDO_1_6_3","v1.6.2","SUDO_1_6_2","v1.6.1","SUDO_1_6_1","v1.6.0","SUDO_1_6_0","v1.5.9","SUDO_1_5_9","v1.5.8","SUDO_1_5_8","v1.5.7","SUDO_1_5_7","v1.5.6","SUDO_1_5_6","v1.5.4","SUDO_1_5_4","v1.5.3","SUDO_1_5_3","v1.5.2","SUDO_1_5_2","v1.5.1","SUDO_1_5_1","v1.5.0","SUDO_1_5_0","v1.4.0","SUDO_1_4_0","v1.3.1","SUDO_1_3_1","v1.3.0","SUDO_1_3_0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82474.json","vanir_signatures_modified":"2026-08-31T08:16:47Z","vanir_signatures":[{"target":{"file":"src/exec_ptrace.c","function":"verify_execve_args"},"deprecated":false,"digest":{"function_hash":"203548968734890528199916303046892812754","length":396},"id":"CVE-2026-82474-01864d49","signature_type":"Function","signature_version":"v1","source":"https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf"},{"digest":{"function_hash":"201371535958991379094712608619725629229","length":455},"id":"CVE-2026-82474-4eb5cac8","signature_type":"Function","signature_version":"v1","source":"https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf","target":{"file":"src/exec_ptrace.c","function":"proc_read_link"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"73515474014296434138461726749587919530","length":1667},"id":"CVE-2026-82474-69470d06","signature_type":"Function","signature_version":"v1","source":"https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf","target":{"file":"src/exec_ptrace.c","function":"ptrace_readv_string"}},{"deprecated":false,"digest":{"function_hash":"42422473747490664729214380959002845347","length":2461},"id":"CVE-2026-82474-6b5939f0","signature_type":"Function","signature_version":"v1","source":"https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf","target":{"file":"src/exec_ptrace.c","function":"get_execve_info"}},{"digest":{"function_hash":"219143510401136873188433940755539709526","length":5134},"id":"CVE-2026-82474-84e42a67","signature_type":"Function","signature_version":"v1","source":"https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf","target":{"file":"src/exec_ptrace.c","function":"ptrace_intercept_execve"},"deprecated":false},{"target":{"file":"src/exec_ptrace.c"},"deprecated":false,"digest":{"line_hashes":["15103755852083203772110009286537155020","176359832038075561928092965644046677290","78651464179075881279345368397578873317","318876939192727230056205024449731691001","309655254065133788462121489666295146989","197660909832334599582786166176814860606","108020931553741883209525966593117353701","172346687067681275343003417074885114399","154961488384203703427210305864260730733","311403206632928996459092414150845952272","38386335731532203133687390226690034288","243366934712433809340357726697696881143","272392529088610934417234297497308375903","109886424040852187740107102278330788483","202710790004611445940411710902467808405","33932977535176006445368544899973322643","164264853058691324298692154046749145738","165837989688970330637299133542213867176","268394411276568390221786345824109089527","220563539826048175904735826862750270766","177495639810548793509897078737503979999","181868555788157399920755446959167854893","70127441808459874680264407750135705463","126549847324507521144733901073260085111","8730249978338385135989597518393937146","11753980218640974063751109527999204134","184299714239812543420115943432189302286","160794627164387777766562962569802461575","156084056806633574798527151444488698519","196438792153385113299176446534498969875","78651464179075881279345368397578873317","17152563905049104464014180193008219899","122684958592324884409812211322863282256","10356207006153962832818530417977338146","108020931553741883209525966593117353701","278749521100161652033015423250993940039","24165870929652006258028121018724759484","257672720146372957131554625460965523226","38386335731532203133687390226690034288","117022282681211837823004208029929864773","204584154016764945418649029550563436522","330273579665391447038027964848341644051","27245597577840665931728394845552554503","33932977535176006445368544899973322643","164264853058691324298692154046749145738","262300276894846958415158251621301756700","268394411276568390221786345824109089527","295071781768222038370877412924414196920","278859499988425405099218094050755944869","107383639677193322288708582850518799441","182090338645186509383775969917810198833","126549847324507521144733901073260085111","138848222251785310514523751472314648544","9656478451648540883463444012017341780","92284629856298057324781544979049459027","116034961862392531010741924488911901437","198074941316401994894968223190070943535","20636824267955364401017998603122457342","308959765406108218061755448261752271036","96457085265843629768092140244168078986","55101394378300431606782624197742151163","175848890888334113577756897133399139731","126494491121315098156603193702433578548","24668653696835090478486176183258110858","278771125471805085528436356209039790227","82201232868383899709550662731059432260","132370972495986183960442491947672271634","14260560371108410789477495189889769579","271114784329731508898597910295990515334","277776259275930095565844931396054104022","126209594628818723756565446204980439444","44429402211142001240083094736373561593","243842695911870886705151448846130416339","185699116988895529412065399875579681564","233339962348421587558257714409953538805","125446277311782545066838140066211012122","295330244032671561300383808932434107614","169504104271349626853183625082194465554","339084640143288884959991485366099781375","74312980787859237971804691897933839755","296011341342591400521281192599587165461","236044517002890620665691233661609998988","145643413621510628231826521265761947371","333559556899927327192099399564584271773","190374129187020139619297600775936198047","227655121536502410774927727312123909131","268250815653416825745555577207748116904","140894637989016592348067279905277210901","33852427375186086576128683318147414288","98078023392270809540702263511508032480","185198095111495819974858300119535783163","213161800449707831487811979984166523830","78955772348524046349988688154943316962","89783094640397459291128103113373461331","24551724245996851741879834104296963287","31251924266796629105436704167963406956","194566552954023285990583798467729925588","34769330333860413065939068064048077836","308196298971735040506765007389345292050","305715911972392613651340356908879361136","141895489290471724775362709578768964739","224203286969454433336665409187872931996","186053185327839214568731431027766822491","314556443662371349786377411751661630506","289030826185691969196225318203023992481","199256356384141259410582917108504442125","116432294071822191292093652175614993023","209610829034036349203908699642896950337","46730195137604446485123907619770092542","160240279421555765668496524531565224150","244148066784097046402690026406232698285","170836419217557994020502370736109387773","213528858890970651265062382926604569298","92602901834361298865740287951361798481","314870955203791661264921173595495478953","189576702398243449621944179028512568639","1832926618751763355907113090294536883","96812899862147236994074897615217195547","69949535297610370267887843225232480715","240482999784127858194347057716685166117","282279659683293395138880166162619836872","30971969512810607919780405824297365454","268154117891118023605078362791866259970","65279083625651856754865083941321075904","302584895684463189325219301401878549461","317458233257076953473621774172734702881","184212597306351591396812412091197418315","144116818675465812581653282499775366838","80702182033422018326035009336230127655","20334926680442375895939597436752315154","212411595434249631518299271793814437353","116294557407768961947578554457514866471","120416045370640834346741756936514273991","218011881308736453042387504118317239819","290832082594427911926343330840569945156","105266025638408963027618118416162422929","104388408364125960512417182114032899292","256412578699198606134504111130883022291","266475762553186158425438764950826012318","180682144675214227101748473500381983376","155299995193439229390063125718542798098","8475998965824261207864294311161547998"],"threshold":0.9},"id":"CVE-2026-82474-85e111e2","signature_type":"Line","signature_version":"v1","source":"https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf"},{"target":{"file":"src/exec_ptrace.h"},"deprecated":false,"digest":{"line_hashes":["129087097301445892211086124044982009122","84282451533849627693567607706860121635","319326153738037713079768356926580162719","245971990200982746183017230638938261997","132025892812383762319388336383942294844","30296844308230664105299774385065239225","286352143763435758505404059133887222365","235034747888333241315388511791523902142","193772780058744551874080652035895551834","116275224958106871869850888040509817127","264621797675810333869842218484602464462","257420480199557980676090273441573051116","68948878856114266272061100824077144046","127376455221647783449734606501407313088","150557828805476636230287279485549007515","8287659472056889344191372849223332917","17310775348622990127775633615291240909","322605722277713035243654305973857322980","120800229316826339567361123914049489765","13765181910053275690842146809919133227","167197550672037619104628820350537574952","286395195553178192357744156329925392406","11009432117823235381614394121821617083","91514019874752568410186386464031150426","201892345341886572137405033104738463125","273421587622391623794644856485247293692","284129891656632213054403425285616640716","19500073112043359728624896855832446729","299224553733504768659989197859066522852","127468894963247978907189736190642920201","135809003601686118493585873259032894299","321715497065028822698235465699277463383","212576239782259361543684845938164413454","323546401364917100824745295840287112020","112230859766071213874940650752785478965","324077211309348597500621114136791167737","308089491377067789711196853011910962486","267907568679791261360444432033511185949","105035133249081167980172897743658472918","67516415574579517564941123534835143535","102984942634173522901428815742238254556","14763690094720946496485263584076335132","304025753598473094055419954781211659551","42231290550201003254637117004158835605","257362479921618255810944496798084229358","269825209673921627568400705577918610799","151167536912991041321035297492657514977","104321597564398951069877579983428708055","158426164742106277449549384930801830586","126445085646284480004472547466447215247","53373771475695869825121463283320683590","119257734325626858045117808164226533688","27872144817514881854819132650334773430","223822413860947443736636009532998399220","33264492122274396348689135275217826932","293092107931169372253624472006816188935","237195467343264807138725538555677693207","107380509188827848136932318512583315459","264419720362557125542067240010172550832","11308103818004409586534965855948956028","191769823192572461610909111135781401427","206662333816473705742236632505421489345","15379244061513380740863281691411707310","339992875182946797796259762440766709124","191769823192572461610909111135781401427","150834960963412656269954698161773528395","93077422473408868727126397363066172111","46819550002945580184649598711094352990"],"threshold":0.9},"id":"CVE-2026-82474-a638ab36","signature_type":"Line","signature_version":"v1","source":"https://github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}