Filedescriptor inheritance

Exec'd processes inherit file descriptors too.  This is necessary for

Programs to communicate over pipes
Programs to maintain access to TTYs

However, this can be a problem if the new process should not be allowed access ot the resource

If the new process is running as an unprivileged user
If the new process is untrusted / buggy