CVE-2026-35535

In Sudo versions up to 1.9.17p2, specifically before commit 3e474c2, a failure in a setuid, setgid, or setgroups call during the privilege drop prior to executing the mailer is not treated as a fatal error. This situation can potentially lead to privilege escalation.

‍