One attack vector is your terminal emulator’s interpretation of escape sequences. Some of them allow code execution. E.g.: https://www.proteansec.com/linux/bla

One attack vector is your terminal emulator’s interpretation of escape sequences. Some of them allow code execution. E.g.: https://www.proteansec.com/linux/blast-past-executing-code-terminal-emulators-via-escape-sequences/ https://www.proteansec.com/linux/blast-past-executing-code-t... > Its important to emphasize that escape sequences used in up-to-date terminal emulators used today most likely don't have such vulnerabilities, since they have been mitigated in the past. However, terminal emulators developed recently and used on other devices, like on embedded devices, Android, iOS can still contain such vulnerabilities.