CVE-2023-24055 KeePass 2.5x
In short, having access to the KeePass configuration file, you can filter the stored passwords to your server in plain text.The trick is that you don't need to monitor when the user opens the manager.
PS: although the method was described by harmj0y 7 years ago))