[Severe Remote Code Execution Vulnerability Found on EAC Website] Cybersecurity firm XBOW disclosed a critical remote code execution vulnerability in a public web application belonging to the U.S. Election Assistance Committee (EAC). This vulnerability allows unauthenticated exploitation. The application is used for resource and logistics computation, not for voting machines or voter registration. The vulnerability could allow attackers to execute code with root privileges in a backend container by crafting specific web requests, gaining access to local protected resources and external networks. XBOW stated that it reported the issue in accordance with EAC's vulnerability disclosure policy, and the vulnerability was patched before the U.S. midterm elections after verification by the EAC team.