A binary’s arguments may implement one or more of the following functions:
It can be used to break out from restricted environments by spawning an interactive system shell.
It can be used to break out from the intended program by running non-interactive system commands.
It can exfiltrate files on the network.
It can download remote files.
It writes data to files, it may be used to do privileged writes or write files outside a restricted file system.
It reads data from files, it may be used to do privileged reads or disclose files outside a restricted file system.