The DNS Field That Could Run Anything as Root

A text field, a privileged helper, and no validation between them. How a convenience feature became a root command-injection.