<p>Sudo is a foundational privilege escalation tool in Unix-like systems, intended to provide fine-grained access control. This paper presents a detailed examination of common and overlooked sudo misconfigurations, grounded in real-world attack scenarios and system behaviour. A practical threat model is defined, configuration patterns that lead to privilege escalation are classified, and their impact is evaluated in adversarial contexts. The findings demonstrate that many administrative practices - though well-intentioned - create exploitable attack surfaces. Recommendations and a discussion for securing sudo policies are included.</p>