In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed