Hi @brisky1 - as you say, it's most likely a bug!
Is the camera connected to an NVR, or are you accessing it directly to draw the privacy mask?
If accessing it directly, which browser are you trying?
Also, is it a G3 or G5 platform model / (C) or non-(C)?
You could try in iVMS-4200 - iVMS-4200...