KDE File Manager can be tricked into executing commands as root by creating a HTML file with a link to a binary.