Is BOINC safe to run on your personal computer/server with your private files?

Is there any way hijacked tasks can read your other files? I assume BOINC uses some kind of sandbox but how secure is it? All my stuff run Linux if that makes a difference.