A Process call whose arguments contain interpolated variables can be manipulated to run arbitrary commands.
Validate and whitelist arguments and never pass raw user input to a process invocation.