Version 4.7.2 fixed an unauthenticated privilege escalation vulnerability so serious it was deployed in total silence