[vgalin]

Then it would be an attack vector of course, but whether it is a vulnerability of the password manager itself would be debatable.

[Ambolia]

Seems like I was wrong, according to this comment[1] you also need local access to get the passwords after modifying the KDBX file.

[1] https://news.ycombinator.com/item?id=34545504