A Roblox user can claim ownership of any thumbnail they want

Potential Thumbnail Ownership / Asset Reference Vulnerability

Hello,
My Roblox username is VucesDand, and I am the owner of Infinity Studios.

I would like to report what appears to be a potential vulnerability involving Roblox experience thumbnails, asset ownership, and copyright enforcement.

Original Thumbnail

This is the original thumbnail that I personally created and that belongs to Infinity Studios:

My Thumbnail:
https://create.roblox.com/store/asset/109553986585069

Experience Using the Thumbnail

The experience that is using my thumbnail is:

Experience:

The experience is owned by Civciv Projects while the thumbnail itself is still attributed to Infinity Studios

The important point is that the thumbnail does not appear to have been downloaded and re-uploaded as a new asset. Instead, it appears that my original thumbnail is being directly referenced or used by another experience while retaining my group’s ownership/creator attribution.

Copyright Reporting Issue

The situation becomes even more concerning when I attempt to report this unauthorized use through Roblox’s copyright reporting system.

The system appears to treat the report as though I am submitting a copyright claim against my own asset. Instead of removing the unauthorized use from the other experience, my original thumbnail can be affected or removed.

This creates a serious problem for the legitimate copyright owner because the owner may effectively be prevented from enforcing their rights over their own content.

Why I Believe This May Be a Vulnerability

I believe Roblox should investigate how an experience owned by Civciv Projects is able to use a thumbnail that remains attributed to Infinity Studios, without the thumbnail being uploaded as a separate asset.

In particular, I would appreciate an investigation into:

  • How the original thumbnail is being referenced by the other experience;
  • Why the original ownership information remains attached to the thumbnail;
  • Whether this behavior is intended or caused by an authorization issue;
  • Why the copyright reporting system can interpret the report as a claim against the original owner; and
  • Why the legitimate owner’s original asset may be affected when attempting to report the unauthorized use.

I am not simply reporting this as a normal copyright dispute. I am specifically reporting the underlying technical behavior that appears to allow an asset belonging to one creator/group to be directly used by another experience while retaining the original ownership information

I have attached screenshots showing the issue.

Please investigate this behavior and, if appropriate, escalate it to the relevant engineering/security team.

Thank you for taking the time to investigate this issue.

Page URL: <https://create.roblox.com/store/asset/109553986585069/Asset-Thumbnail and Kurdish Obby | Play on Roblox>

2 Likes

Hey @ArtexWonze, thanks for the report. We’re looking into it now and may reach out for more details if needed. Stay tuned for updates.

Hello, thank you for reaching out to me.

Something important has happened, and I would like to ask you to review the messages I posted in this thread: https://devforum.roblox.com/t/private-information-bug-report-from-artexwonze/4774696

I believe the information in those messages may be important for understanding the situation. Thank you for taking the time to look into it.

Hey @ArtexWonze, we’ve successfully addressed the original reported issue. Although thumbnails necessarily remain public, users are no longer able to use others’ thumbnails for their places.

Thank you for your help and for taking the time to look into this matter. However, no one has reviewed the topic I created regarding my Rights Manager access being unfairly restricted. Could you please forward it to someone who can look into the issue?