Most (all?) versions of sudo have a bug where local unprivileged user
can get root access:
Updates are already out for most distributions that are still
receiving security updates. If yours isn't then you might want to
remove sudo (and think about an upgrade).
This is CVE-2021-3156.
-- No-nonsense VPS hosting