Could execute arbitrary rrdtool commands such as cd and ls.
Authentication users could include arbitrary file.