“Before this vulnerability was patched, you could send a message to NetAuthAgent asking for the credentials to any server, and it would just give them to you.”
macOS handed saved file server passwords to any process that asked. There was no entitlement check. Apple patched it in October, and the write-up came five months later.