The flaw consisted of missing interprocess validations, which could have allowed an attacker to hijack the 1Password browser extension or command line interface.