Pinacolada64
commented
6 years ago Questions:
- What are all the other access flags set to?
- Is the user logged in through the console?
This could happen if access group 0 was assigned Remote Maintenance (or there's a bug somewhere).
This isn't particularly desirable from a security standpoint.