A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. A local attacker may gain access to Keychain items.
CWE-280 Improper Handling of Insufficient Permissions or Privileges