Sudo Misconfiguration

Use weak sudoers authorization or an abusable sudo credential cache on Linux or macOS to run an already-permitted command as a more privileged user without a new password prompt. Examples include overly broad NOPASSWD rules and cache settings that prolong or share a user's timestamp across sessions. Inspecting sudo policy is discovery; changing /etc/sudoers requires existing administrative authority and is not by itself an unprivileged escalation path.