node_allows_single_hop_exits(const node_t *node)
{
  if (node && node->ri)
    return node->ri->allow_single_hop_exits;
  else
    return 0;
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.