Comment by dzbarsky

This is why you should use containers for running binaries on user-supplied data.