wow hard to believe there's a serious security vulnerability here