The software is used for configuring applications by large organizations from Apple to CloudFlare to Minecraft.
Jen Easterly, head of the Department of Homeland Security’ Cybersecurity and Infrastructure Security Agency, described the flaw as “one of the most serious” that she has seen.