Privilege escalation is definitely a vulnerability, the same way you'd consider a Docker escape a vulnerability.