On the surface this seems bad, but it looks like you need physical access to the laptop to get in with this vulnerability. If someone has physical access to your computer, you should consider the data compromised (unless you're doing full-disk encryption or something).