StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information.
{ "urgency": "medium" }