A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.
CWE-287, CWE-287