The vulnerability was revealed by a disgruntled researcher.