Yes. When an app accesses the keychain a dialog box is presented to the user with "Allow", "Always Allow" and "Deny". If "Always Allow" is chosen, then the app

Yes. When an app accesses the keychain a dialog box is presented to the user with "Allow", "Always Allow" and "Deny". If "Always Allow" is chosen, then the app will have permanent permission to access _only_ that particular password in the keychain. This vunerability appears to bypass that dialog entirely and dump the entire keychain in plaintext without requiring the users permisson.