diff --git a/fish/files/config.fish b/fish/files/config.fish
index 79a9dc1..ae33ab8 100644
--- a/fish/files/config.fish
+++ b/fish/files/config.fish
@@ -102,9 +102,10 @@ status is-interactive; and begin
 
 end
 
-# PATH ordering: prefer Nix/system binaries over self-installed shims in ~/.local/bin
+# PATH ordering on Linux: keep privileged wrapper binaries first (sudo, etc.)
 if test (uname) = Linux
-    fish_add_path -m /run/current-system/sw/bin
+    fish_add_path -m /run/wrappers/bin
+    fish_add_path -a -m /run/current-system/sw/bin
 end
 
 # Add user local bin to PATH, but keep it after system paths on Linux