You give it command line access in a VM...
You mean a VM like the one that contains a 0day that can escape the sandbox that gets found every year at pwn2own?