In this case, the vulnerability stems from how Sudo treats user IDs. Using a negative user ID, such as -1, as in -u#-1, triggers the vulnerability and gives root access.