Looks as though this bug (CVE-2023-3269) allows privilege escalation to kernel-level permissions. Full vuln POC is expected in a month.