It's still odd for software to only work when launched from a specific directory, but not necessarily a critical security vulnerability then.