Multivendor possible bug in code?

When I upload products through CSV for one vendor, it also goes and updates products of other vendors just because SKU matches.

This is very bad for external and affiliate products as anyone can come in and just update everyone else product by using their sku.