Qt5 applications accept common command-line flags that can be abused for argument injection. This affects any application built with Qt5.
It can be used to break out from the intended program by running non-interactive system commands.
The -platformpluginpath flag can be used to load arbitrary shared libraries from a remote path.
qt5_app -platformpluginpath \\foo\bar