1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient.Referenceshttps://app-updates.agilebits.comhttps://support.1password.com/kb/202408a/