ALAC vulnerability