tmux Sanitises Window Names Against Injection
clean_name() is tmux’s one defence against name-based injection, and it works by encoding rather than filtering: it stores names in a form where the dangerous characters…
Security
tmux Control Mode Is an Unauthenticated Command Channel
tmux -C gives you a scriptable protocol with zero authentication — anything that can open the socket can run run-shell.
tmux Secures its UNIX Socket
There is no password, no token, no challenge-response in tmux.
tmux Format Expansion Runs Shell Commands: A Template Language With a Footgun
tmux formats are code, and they execute where they’re expanded.