I changed the sudo settings to not require a password.
Now an application on my computer can obtain root without user interaction.
Where is my CVE?
Same. There are so many things you could mess up without root from my account anyway. My account isn't a locked down one. You could alias sudo to a keylogger, for instance, and then do whatever as root the next time I sudo something.
So the password check really has no point. Typing sudo is still a lightweight sanity check, otherwise I may as well just log in as root.