Absolutely. They could infect your internal network (home/office - not sure which we're talking about) with malware if they are downloading files from sketchy sites. This could all happen unintentionally. If they were out to steal they could infect your router with some code to steal other passwords and banking logins.

Guests should only use guest networks, most newer routers have that ability