Process.Start is invoked with a command or argument string built from concatenated untrusted input.
Pass a fixed executable path and supply arguments as a validated ProcessStartInfo.ArgumentList collection.