Kristoffer Von Hassel, from San Diego, has discovered a vulnerability in the new Microsoft console.
His father locked his account on his Xbox One with a password to prevent the boy from playing games that are not suitable for his age.
He said he tried to enter a password, but it was wrong. However, after repeatedly pressing the space bar to fill up the password field, he was able to access his father’s account.
“I got nervous. I thought he was going to find out,” Kristoffer told KGTV.
“I thought someone was going to steal the Xbox.”
His father, who works in computer security, contacted Microsoft who have since corrected the fault.
The kid was awarded four free games, a $50 credit on Xbox Live Gold and a one-year subscription.
The name “Kristoffer Von Hassel” now appears in a list published by Microsoft of researchers who found security flaws in their products.