> Therefore, this allows complete access to internal privileged LastPass RPC commands. There are hundreds of internal LastPass RPCs, but the obviously bad ones

> Therefore, this allows complete access to internal privileged LastPass RPC commands. There are hundreds of internal LastPass RPCs, but the obviously bad ones are things copying and filling in passwords (copypass, fillform, etc). If you install the binary component (https://lastpass.com/support.php?cmd=showfaq&id=5576 https://lastpass.com/support.php?cmd=showfaq&id=5576), you can also use "openattach" to run arbitrary code. Any lastpass RPC was able to be called, which does mean that it compromised the passwords. Now, the worse part is that any code (any .bat file, which on windows is similar to a bash script) could be run on the host computer, which means they can effectively take over the host computer.