Unpatched Critical Vulnerabilities Open AI Models to Takeover