It's no exploit. It's working as intended.