Root privilege escalation via wildcarded sudoers path

Path traversal in terraform-provider-proxmox before 0.93.1 allows local users to obtain root access through an unsafe documented sudoers rule. The SSH setup guide granted passwordless root execution of tee for /var/lib/vz/*, and sudo's wildcard matched ../ sequences that escaped that directory. Exploitation requires an administrator to have installed the documented rule and the attacker to control the configured Terraform SSH account; the demonstrated path writes a new sudoers file and grants unrestricted root commands.