Lots of comments but nobody seems to be asking the obvious question: what kind of bug?

If the "bug" is "we had a bad system prompt" ok then this is stupid. If the bug was "turns out if you pass a secret argument to a HTTP endpoint you can skip the system prompt" then this is a hack.