[chii]

> follow instructions stored in user’s documents

it is no different from remote code execution vuln, except instead of code, it's instructions.