XBOW disclosed and fixed a vulnerability in the U.S. Election Assistance Committee's web application.

On October 29, cybersecurity company XBOW disclosed a critical remote code execution vulnerability in a web application of the Election Assistance Commission (EAC). The vulnerability did not affect voting machines or voter registration systems. Attackers could execute code with root privileges in the backend container by crafting web requests. Following XBOW's report, the Election Assistance Commission has patched the vulnerability.