Security

Report a vulnerability, privately.

Issues on AI17Z Code are public, and it has no private ones, so a vulnerability comes here instead. Only the maintainers read what you send. You do not need an account.

One sentence, such as: read another installation's provider keys.

The steps, or the conditions under which it happens. Please do not paste working credentials, even your own.

From the Health screen or BUILD_INFO.json, such as 1.0.0-beta.85, or which Studio page.

An address of your choosing, if you want a reply. Stored only with the report.

What is in scope, and what happens next, is in Security.

Report a vulnerability · AI17Z