Hacker News Reader

They do not. They require arbitrary code execution on the main cpu to be used.

So, they are basically saying that bash is vulnerable to arbitrary command execution?

Yes