Hacker News Reader

Then it would be an attack vector of course, but whether it is a vulnerability of the password manager itself would be debatable.

Seems like I was wrong, according to this comment[1] you also need local access to get the passwords after modifying the KDBX file.