Lack of sanitization throughout Netrw can lead to arbitrary code execution upon opening a directory with a crafted name.