It's a possibility. I don't know about CSAM but I know someone who was arrested for death threats sent to a politician after running a tor exit node. Eventually not charged, but he lost all his computing equipment for a couple of months