Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

AlmaLinux sudo can run unauthorized programs

published 1 month ago

Summary

The sudo tool on AlmaLinux lets administrators grant users limited root access. A flaw lets an attacker bypass controls and run programs they shouldn't be able to. Install the latest sudo updates from AlmaLinux as soon as possible.

What to do

Update almalinux sudo to version 1.9.17p2-3.el9_8.1.
Update almalinux sudo-python-plugin to version 1.9.17p2-3.el9_8.1.

Affected software

Ecosystem	Vendor	Product	Affected versions
AlmaLinux:9	almalinux	sudo	< 1.9.17p2-3.el9_8.1 Fix: upgrade to 1.9.17p2-3.el9_8.1
AlmaLinux:9	almalinux	sudo-python-plugin	< 1.9.17p2-3.el9_8.1 Fix: upgrade to 1.9.17p2-3.el9_8.1

Original advisory text

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

* sudo: Sudo: Policy bypass allows unauthorized program execution via execveat (CVE-2026-82474)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

https://access.redhat.com/errata/RHSA-2026:69123 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-82474 Third Party Advisory
https://bugzilla.redhat.com/2525889 Third Party Advisory
https://errata.almalinux.org/9/ALSA-2026-69123.html Vendor Advisory

Timeline

Published21 Sep 2026

Updated22 Sep 2026

First seen22 Sep 2026

Sources

ALSA-2026:69123 · OSV

Track software like this

Free during beta