Under some conditions it's possible to execute code with group rights.
vulners.com/securityvulns/securityvulns:doc:25518