Fix privilidge escalation flaw