An exploiter could create a Sound Instance. Thats either on Server, or on other’s Clients. We are not sure about that.
Using that Created Sound Instance, he could play any sound for anyone in the server.
A private message is associated with this bug report
Exploiters can create sound objects on the client.
I suppose the OP meant that sounds created on the exploiter’s end get replicated to the server (and then to others) which can be abused. I don’t see how this is possible and I believe there is a security issue in the game’s remote events. However the rest of the report is hidden in the private message, so we may not know.
Good new we have it fixed. Yes it’s a remote event which didn’t do verification.