BSI warnt vor KeePassXC-Schwachstellen
www.heise.de
Das BSI warnt vor Schwachstellen im Passwort-Manager KeePassXC. Angreifer können Dateien oder das Master-Passwort ohne Authentifzierungsrückfrage manipulieren.

According to the article, a attacker can manipulate the master password on unlocked database, without to re-nter credentials. A attacker can also extract/export a database without confirmation.

As long the database us locked, this should be no issue.

CVE-2023-35866