CVE-2023-29586

CVE-2023-29586 describes an arbitrary file read vulnerability in Code Sector TeraCopy 3.9.7, stemming from improper access validation during copy operations. This medium-severity vulnerability (CVSS 5.5) allows a local, low-privileged attacker to copy any system directory to a location they control, potentially leading to information disclosure. Despite the vendor's dispute regarding the necessity of administrative privileges for exploitation, there is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.