Fahad Alamri

The issue is related to a misconfiguration in the Node.js environment settings of WD Discovery, which could allow code execution by utilizing the `ELECTRON RUN AS NODE` environment variable. Any malicious application operating with standard user permissions can exploit this, enabling code execution within the WD Discovery application's context. The attack vector requires the victim to have the WD Discovery app installed on their device.

The issue is related to errors in handling files, specifically cookies, which can allow a remote attacker to gain unauthorized access to protected information.

The issue allows an attacker to execute code via the `DYLIB INSERT LIBRARIES` environment variable. This is a code injection problem in Remote Desktop Manager on macOS.