Matthias Gerstner discovered that the –join option of Firejail, a sandbox to restrict an application environment, was susceptible to local privilege escalation to root.