GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
gnu make 3.77.44