The vulnerability arises from the daemon configuration directory and file being created with default Unix permissions that can be world-readable, allowing a local user to read bearer tokens and API credentials stored in ~/.summarize/daemon.json. This local attacker can obtain the daemon bearer token and persisted provider credentials, providing unauthorized access to the daemon or enabling recovery of sensitive API keys.

The affected product is steipete: summarize, versions up to and including 0.14.1. The fix was introduced in commit 0cfb0fb, which correctly sets restrictive permissions for the configuration file.

The CVSS score of 6.9 classifies this vulnerability as medium severity. No EPSS score is available, and it is not listed in the CISA KEV catalog. The attack vector is local; based on the description, a user who has read access to their own home directory can read the world-readable configuration file, thereby extracting bearer tokens and stored API credentials which can be used to gain unauthorized access to the daemon or retrieve sensitive keys.