Unless you can reproduce this on a local instance I wouldn't be too worried.
Usually the demo is our goto for testing but multiple accounts (and now portal users due to the recent changes) won't work there because we have to run scripts that manually clear out users and re-add the demo user, since people kept changing the password and adding MFA.
-
The forum isn't really the place for security related issues, please submit them via the disclosure process instead: itflow-org/itflowsecurity