This is technically a server authority feature but i must have been so sleep deprived to not implement and server validation on this...

Yeah that should be fixed with the next patch.