why is autoscan showing up assigned to an existing user

[blackcatTN 3]

I have an emby user named "undefined" and for some reason the external app, not even installed on the same box as emby called autoscan (this one https://github.com/Cloudbox/autoscan/releases/tag/v1.4.0) shows autoscan's activity under that user in Playback reporting.

Since we are here, same question about embystat.

Also, that user is always remote, but is shown with the internal IP when Emby claims that user is doing what autoscan was doing. So, clearly wrong.

The information presented by Playback Reporting seems to be invalid or not accurate, yes?   

Did you guys miss an edge case?

Edited January 9 by blackcatTN
more info

[Luke 42077]

@TeamB

[TeamB 2438]

7 hours ago, blackcatTN said:

The information presented by Playback Reporting seems to be invalid or not accurate, yes?   

Did you guys miss an edge case?

who knows, probably, the source code is here:
https://github.com/faush01/playback_reporting

[blackcatTN 3]

And that is certainly not getting bad data from emby core?  So this isn't some edge case that will lead to a security vulnerability?   Glad it was looked into so carefully, thanks for your time and professionalism.

[TeamB 2438]

23 hours ago, blackcatTN said:

And that is certainly not getting bad data from emby core?

it could be, no no data and filling in the name with a place holder.

23 hours ago, blackcatTN said:

So this isn't some edge case that will lead to a security vulnerability?

not sure how it would lead to a security issue, you can check the source code of the plugin and verify or if it is a big concern for you you can just uninstall the plugin.

23 hours ago, blackcatTN said:

Glad it was looked into so carefully, thanks for your time and professionalism.

cool, np