“I Let an AI Run a Command… It Took Over the System”