[XBOW Discloses Critical Remote Code Execution Vulnerability in US Election Assistance Committee Web Application, Now Fixed] Jinse Finance reports that on October 29th, cybersecurity company XBOW disclosed a critical unauthorized remote code execution vulnerability in a public web application of the US Election Assistance Committee (EAC). This vulnerability could be used for resource and logistics calculations, but did not involve voting machines or voter registration systems. Attackers could craft web requests to execute code with root privileges in the backend container and access local protected resources and external networks. XBOW disclosed the vulnerability in accordance with the EAC's policy report, and the EAC verified it and fixed the vulnerability before the US midterm elections.