1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient.
CWE-1289 Improper Validation of Unsafe Equivalence in Input