This sounds like a very serious security vulnerability...?