An issue allows authenticated remote callers to read files from the daemon host by opening file:// URLs. An attacker can send an open command with a file:// target through the '/rpc' endpoint and then issue a snapshot to read any plaintext file accessible by the daemon account.