Well, java also has file i/o APIs. Therefore you can just persist the exploit with a simple rootkit, a systemd service or whatever floats your boat. It's an RC

Well, java also has file i/o APIs. Therefore you can just persist the exploit with a simple rootkit, a systemd service or whatever floats your boat. It's an RCE after all. A VM doesn't imply security policies of any kind, and by default, nobody uses firejail or similar to isolate what the programs are able to affect on their systems.