Introduce controller with vulnerability