SECURITY Signal 172
AI tools allow recovery of ballot order from voting system vulnerability
↗
Illustration only Photo by Alan Bowman on Unsplash
The vulnerability allows attackers to use AI tools to infer the sequence of cast ballots from publicly available cast-vote records and early-voting lists without accessing voting machines or networks.
It allows the reconstruction of how individual ballots were cast, threatening the secrecy of the vote. Because the exploit works with only public data, it can be applied in any of the 21 states that use the affected scanners, as shown in Georgia’s May 2026 primary.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
The vulnerability allows AI tools to recover ballot order by analyzing public CVR files and early-voting lists.
No direct interaction with voting machines, networks, or non-public information is required for the attack.
The method was demonstrated in Georgia’s May 2026 primary, affecting one of the 21 states that use the vulnerable scanners.
THE READ
What the cluster adds up to.
The known vulnerability in the voting system can now be exploited with AI tools to deduce the order in which ballots were cast. This is done by feeding a coding agent the original vulnerability paper and supplying it with two public data sources: the county early-voting lists and the cast-vote record (CVR) file. The CVR file contains every ballot’s selections but omits voter names, and it is made available upon request to support independent verification of results. Because the data are already public, the attack does not require touching a voting machine, probing a network, or viewing source code.
Revealing the sequence of ballots compromises voter privacy and can be used to infer voting patterns or behavior. The technique was applied to Georgia’s May 2026 primary, showing it works in one of the 21 states that deploy the affected scanners. Since the exploit relies solely on information that is already released for transparency, the cost of mitigation would involve altering what is made public. Such a change could affect the ability of observers to audit election results independently.
The attack stops working if the CVR file or early-voting lists are no longer made publicly accessible. It also fails when ballot order is deliberately obscured, for example by shuffling records before release. Because the method needs no interaction with the voting hardware, any fix must focus on the data release process rather than the machines themselves. Thus, the vulnerability persists as long as the current transparency practices remain unchanged.
Written by elseif from the cluster below · checked for specifics the sources never containedTHE CLUSTER