#bug

Hello there , im here to report (i think its bug) from Xenforo where any user can send image which can get any target user ip address without any interaction. The user view the image , and the Ip Address will be logged , can Xenforo do some updates for this?