Doesn't sound like a vulnerability to me, but of course it's a grave bug in vino which should be fixed in -updates. -- vino won't accept my password https://launchpad.net/bugs/65795