CISA warns of critical Linux Sudo flaw exploited in attacks

CVE-2025-32463 is a critical sudo vulnerability (CVSS 9.3) in versions 1.9.14–1.9.17 that allows local attackers to escalate to root using the -R (--chroot) option even if not listed in sudoers; proof-of-concept exploits have been released, CISA added it to its KEV catalog and warned of in-the-wild exploitation, and federal agencies were given a mitigation deadline.