What? It absolutely is a vulnerability, insofar that it allows unintended access to a computer system.

That's like saying, "Car door was open, therefore not theft."