CVE-2023-22809 - sudoedit policy bypass allows editing any file

20 January 2023·Updated: 22 May 2026·1 min

Vulnerability Privilege Escalation Vulnerability Research

Sudoedit can edit arbitrary files. Synacktiv discovered a sudoers policy bypass when using sudoedit, tracked as CVE-2023-22809. This vulnerability allows a user authorized to edit a file using sudoedit to edit other files as the configured RunAs user.

↑