The issue is related to a misconfiguration in the Node.js environment settings of WD Discovery, which could allow code execution by utilizing the `ELECTRON RUN AS NODE` environment variable. Any malicious application operating with standard user permissions can exploit this, enabling code execution within the WD Discovery application's context. The attack vector requires the victim to have the WD Discovery app installed on their device.