A very basic rule of security is that people contact the software vendors before posting in a public forum, so that others can’t exploit the security fault until the fault is fixed by the vendor.
Regardless this problem is a security fault or not, we hope in the future all posters play nice and follow the rules.