One could theoretically use a prompt injection attack to exploit a privilege escalation vulnerability on the kernel.