https://stackoverflow.com/questions/70299028/how-to-create-a-qr-code-that-execute-command
Discussion
Yes this is possible but only if the attack surface is big enough. On a seed signer that is totally airgapped and has no extra functions this is a moot point.