Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.