Can you spot the vulnerability?