diff --git a/roles/pfsense_upgrade/tasks/verify.yml b/roles/pfsense_upgrade/tasks/verify.yml
index 596120b..e130af8 100644
--- a/roles/pfsense_upgrade/tasks/verify.yml
+++ b/roles/pfsense_upgrade/tasks/verify.yml
@@ -33,7 +33,7 @@
 
 - name: Run pfSense-upgrade --check post-upgrade (confirm up-to-date)
   ansible.builtin.raw: >
-    {{ pfsense_upgrade_bin }} -d -c 2>&1
+    sudo {{ pfsense_upgrade_bin }} -d -c 2>&1
   register: _post_upgrade_check
   changed_when: false
   failed_when: false
@@ -59,4 +59,4 @@
       The upgrade may not have applied correctly — check the host manually.
   when:
     - pfsense_current_version == pfsense_new_version
-    - upgrade_available | bool
+    - upgrade_available | bool
\ No newline at end of file