This is some impressive research: IOActive researchers figured out how to get root access on a bitcoin ATM, using the same physical access that a regular customer might have (the touch screen).
https://labs.ioactive.com/2024/01/atm-security-owning-bitcoin-atm.html