
CVE-2025-32463
Local Privilege Escalation to Root via Sudo chroot in Linux

Local Privilege Escalation to Root via Sudo chroot in Linux

Privilege escalation to root using sudo chroot, NO NEED for gcc installed.

🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.

Rust PoC for CVE-2025-32463 (sudo chroot "chwoot" Local PrivEsc)

Docker PoC for CVE-2025-32462 & CVE-2025-32463 (sudo), based on Stratascale CRU research.


Wipe, reinstall or restore your system from running GNU/Linux distribution. Via SSH, without rebooting.

本项目基于 Docker 搭建了一个用于复现和测试 sudo 本地权限提升漏洞 CVE-2025-32463 的实验环境。

Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463

PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability

Privilege escalation to root using sudo chroot, NO NEED for gcc installed.

Local privilege escalation exploit for sudo 1.9.14-1.9.17 that abuses CVE-2025-32463 chroot handling, planting a malicious NSS library constructor to…

Proof-of-concept exploit for CVE-2025-32463, a sudo chroot escape vulnerability, allowing unprivileged users to gain a root shell outside the chroot…

Container-based lab with proof-of-concept exploits for two critical sudo vulnerabilities: host validation bypass (CVE-2025-32462) and NSS library…

HTB OneTwoSeven full walkthrough: deterministic creds, chroot symlink escape, rewrite-rule bypass RCE, CVE-2024-1086 to root

PoC for CVE-2025-32463: Local privilege escalation in sudo via --chroot. Exploits NSS module injection through crafted chroot environments. Designed…

Proof-of-concept exploit for CVE-2025-32463, demonstrating a sudo chroot escape that executes commands outside the restricted filesystem environment.

Local privilege escalation exploit for CVE-2025-32463 targeting sudo chroot design flaw. Provides PoC script, technical analysis, and mitigation…