Your most important account has come to you frustrated with an urgent bug.

You flagged it with the team and you also take it upon yourself to do some investigating and do some testing on your own. After some probing you find a security loophole!

Now that you've identified the loophole.
What should you do next?