diff --git a/src/blacklist.rs b/src/blacklist.rs
index f7fab8a..93a0875 100644
--- a/src/blacklist.rs
+++ b/src/blacklist.rs
@@ -259,6 +259,8 @@ const SENSITIVE_PATHS: &[&str] = &[
     // -- D-Bus sockets (can execute commands via systemd) --
     "/run/dbus",
     "/var/run/dbus",
+    // -- input devices (keylogging via evdev) --
+    "/dev/input/",
     // -- X11 / Wayland sockets (keystroke injection, screen capture) --
     "/tmp/.X11-unix",
     "/tmp/.ICE-unix",