Guest tools are often executed with very high authorisations on virtual machines. As a consequence, they may be misused for denial-of-service attacks or as a means of taking over the entire virtualisation server (for example).