A vulnerability in the X.509 key reading function 'readKeyFile' allowed private key file descriptors to be inherited by child processes due to the absence of the close-on-exec flag. This could lead to private key leakage if untrusted child processes do not close inherited descriptors. The issue was fixed by setting the close-on-exec flag on Unix-based systems.