CallBackery versions prior to 0.62.0 for Perl create a world-readable configuration dump file in /tmp during backups. This dump contains sensitive data including all user password hashes and form values. The dump file is not removed after creation and inherits the process umask, allowing local users to read it or redirect it via a symlink to a file of their choosing.