• 1.x receives security updates.

Please report vulnerabilities privately first.

Include:

• affected component
• reproduction steps
• impact assessment
• suggested mitigation (if available)

Do not open a public issue for unpatched critical vulnerabilities.

1. Plugin host isolation and permission bypasses
2. Command injection in MCP / plugin execution
3. Local data exposure in RAG and file engine
4. Remote API credential leakage