Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.
CVSS 3.1HIGH 7.8·Local·Low privileges·No interaction·EPSS 0.00408·Published 2021-05-27·Fixed in 0.4.0CWE-732