Sudo and the timezone that rewrites the clock: CVE-2026-96512 - DEV Community
Sudo 1.8.20 through 1.9.17p2 evaluate time-based sudoers rules using a timezone the invoking user controls, so a local attacker can move the judgement into a window that should be closed.