Hello,
Short answer: No
Slightly longer answer.
Being able to control the guest OS from a host is expected. In fact the Workstation GUI is just that, it gives you an easy interface to manage Virtual Machines.
You can only copy files and run applications/scripts in the guest if you know the guest login and password.
If you have those credentials it is game over anyways, even without vmrun as you can just login.
For going the other way around, control host from guest OS, you -again- need to have login and password (this time from the host) and on top of that you need to know the host IP. The latter can be guessed in some setups. You also would need to install VIX in the guest in order to control anything, but I suppose that isn't a big problem.
If you do find a way that bypasses the required credentials and allows you to do something with infected files from guest to host then you've identified a security problem and in that case we hope that you report it to VMware so that they can address it.
At this moment however when using the latest VMware Workstation versions there are no such issues publicly known.
--
Wil
