Security loopholes plague CPT