It is a vulnerability.

With this you can read files as the root, so you can access files you should not.

With weak passwords you can crack password hashes of other users. If you are lucky you will escalate.