The flaw could allow people to edit personal details on vaccination status certificates after downloading them.

Source