Not a vuln. If someone pwns the session you use to run stuff as admin, she's admin, period.

For completeness, the same can be done with screen:

screen -S session_name -p window_number -X stuff "whoami^M"