An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies.
https://www.secureage.com/security-vulnerabilities#
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/