CWE-732 describes incorrect permission assignment on critical resources: files, directories, services, or other assets are left with permissions that are too broad for their sensitivity. This can let unauthorized users read, modify, or execute data that should be protected. In practice, the weakness often shows up as weak ownership, permissive mode bits, unsafe ACLs, or privileged software creating artifacts that non-privileged users can influence.
It matters because attackers frequently turn a small local foothold into a larger compromise by tampering with trusted resources. If backup tools, configuration files, scripts, or restore paths are writable when they should not be, an attacker may trigger privilege escalation, persistence, or code execution through software that later trusts those objects. Defenders look for CWE-732 by auditing permissions on security-critical paths, minimizing privilege, and reviewing how administrative software creates and uses files. Good permission hygiene is a core control for preventing local abuse of trusted infrastructure.