diff --git a/modules/vulnerabilities/unix/email_phishing/phish_victim_bot/secgen_metadata.xml b/modules/vulnerabilities/unix/email_phishing/phish_victim_bot/secgen_metadata.xml
index 3cecf9aff..d4dbcfef2 100644
--- a/modules/vulnerabilities/unix/email_phishing/phish_victim_bot/secgen_metadata.xml
+++ b/modules/vulnerabilities/unix/email_phishing/phish_victim_bot/secgen_metadata.xml
@@ -14,7 +14,8 @@
 
   <type>phishing</type>
   <privilege>user_rwx</privilege>
-  <access>email</access>
+  <!-- TODO: this can lead to local access, but need to test the default config does before setting here -->
+  <access>user_action</access>
   <platform>unix</platform>
   <difficulty>medium</difficulty>