Five months out of the gate, the XBOX One has run into its first online security problem. And it was found by a five-year-old.

Young Kristoffer Von Hassel (pictured above) exposed the bug when he was logging into his father’s XBOX Live account to play games. He discovered that when you mess up your initial log-in to the gaming service, a second verification screen pops up. From there, filling the password space by holding the spacebar would grant access to anyone’s account. Microsoft almost had a PSN-level security issue on their hands here.

The software giant thanked Von Hassel by dubbing him a security researcher, but that’s not all. He also received four free games, a year-long subscription to XBOX Live, and $50 for his trouble. Not bad for a kid obsessed with Plants vs. Zombies: Garden Warfare.