sudo Vulnerability Enables Privilege Escalation - CVSS 7.4
Summary
CERT-Bund issued security advisory WID-SEC-2026-0971 regarding a vulnerability in sudo (CVSS Base Score 7.4) affecting Linux and UNIX systems. The vulnerability enables local attackers to escalate privileges. Affected products include Microsoft Azure Linux azl3 and Open Source sudo. Mitigation measures are available.
What changed
CERT-Bund published a security advisory identifying a HIGH severity vulnerability in the sudo utility that allows local attackers to escalate privileges to root. The CVSS Base Score is 7.4 with a Temporal Score of 6.4. The vulnerability affects both open-source sudo and enterprise Linux distributions including Microsoft Azure Linux azl3.
System administrators and IT security teams managing Linux or UNIX environments must prioritize patching this vulnerability as local privilege escalation can lead to complete system compromise. Organizations should verify sudo package versions across their infrastructure, implement available mitigations, and monitor for CVE publication for complete remediation guidance.
What to do next
- Apply available security patches to all affected sudo installations immediately
- Audit Linux and UNIX systems for unpatched sudo versions
- Monitor for CVE details and vendor-specific patch releases
Archived snapshot
Apr 7, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
[WID-SEC-2026-0971] sudo: Schwachstelle ermöglicht Privilegieneskalation CVSS Base Score 7.4 (hoch) CVSS Temporal Score 6.4 (mittel) Remoteangriff nein Datum 06.04.2026 Stand 07.04.2026 Mitigation ja
Betroffene Systeme
Betriebssystem
- Linux
- UNIX
Produktbeschreibung
Sudo ist ein Linux System Werkzeug um Befehle unter anderem Benutzernamen/Gruppennamen (UID/GID) auszuführen.
Produkte
06.04.2026
- Microsoft Azure Linux azl3
- Open Source sudo
Angriff
Angriff
Ein lokaler Angreifer kann eine Schwachstelle in sudo ausnutzen, um seine Privilegien zu erhöhen. CVE Informationen Versionshistorie Feedback zum Advisory geben
Related changes
Get daily alerts for CERT-Bund Security Advisories
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
Source
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from CERT-Bund.
The plain-English summary, classification, and "what to do next" steps are AI-generated from the original text. Cite the source document, not the AI analysis.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when CERT-Bund Security Advisories publishes new changes.