You could ask the team to fix it first, however that might not be the FIRST thing you have to do. You may have to notify supervisors/security, notify customers, work with authorities of some kind, there's plenty of things that will likely be in the risk response before asking the team to fix it.