How to handle this in the best way possible?

So I'm applying to a company now for a tech related position (not cyber security related at all). And I discovered that they misconfigured the service they're using for their hiring portal (giving external users an elevated privilege basically).

And it's super easy to get data about other applicants, as well as other employees.

I know the ethical thing is to tell them about it, but I don't want to raise any red flags that might harm my application.

I've …

cyber cyber security cybersecurity data easy external hiring misconfigured portal privilege security service super tech