'Gaping' Security Hole?