TL;DR CERT/CC and security researcher Louis Sanchez of Voke Cyber disclosed three high-risk Bisheng vulnerabilities affecting the open-source LLM DevOps platform by DataElement. Tracked as CVE-2026-96679, CVE-2026-96681, and CVE-2026-100156, these flaws allow unauthenticated super-administrator takeover and cross-user AI credential theft. While the vendor patched two flaws in versions 2.5.0 and 3.0.0, CVE-2026-96679 remains unpatched and requires manual mitigation. Why These DataElement Bisheng Vulnerabilities Matter…