Yes. The problem stems from the fact that the JSONRPC wasn't password protected. Android is affected in the same way, you have to update. The latest version disables the JSONRPC for Android.