If it is faulty, then it's not a bug, it's a flaw.
It is possible to design a security vulnerability.
alt Hacker News
It is possible to design a security vulnerability.