SMS Protect Auto-Login

When logging in to the desktop app, if you’ve already connected your facebook and use that to log in, a browser will open up to use your Authenticator if you’ve connected one, a security code or SMS Protect.

What i’ve found is that if you have facebook connected, and you use SMS Protect, but then click cancel to that request, it auto logs you in without the need of an authenticator or your password. I’m not sure how, but i know someone could exploit or use that to their advantage.

Was asked to put a post here about it from a ticket i submitted.