Rooted it! Root in comparison to initial foothold/user was fairly easy. Nice box nevertheless, I’ve learned a new attack vector from it.
uid=0(root) gid=0(root) groups=0(root)