Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5207.json"