It references two sources:

1. https://securityandstuff.com/posts/teracopy_arbitrary_read (no longer available)

The author reported that TeraCopy 3.9.7 allowed copying folders that regular users typically lack permissions to access. However, the TeraCopy service enforces a check for admin privileges. As demonstrated in the video, non-admin users are unable to access restricted files and folders.

2. https://packetstormsecurity.com/files/143984/TeraCopyService-3.1-Unquoted-Service-Path-Privilege-Escalation.html

Strangely, this CVE also links to a separate issue in TeraCopy 3.1 (released in 2017). The video at timestamp 0:18 confirms that version 3.9.7 does not exhibit this vulnerability, as it was resolved in version 3.5b.