Please report vulnerabilities privately to hi@cloudbtl.com. Do not open a public issue for a suspected vulnerability or include credentials, customer documents, access links or personal data in a report posted publicly.

Include the affected command or endpoint, the impact and minimal reproduction steps. We will acknowledge a complete report and coordinate a fix before public disclosure.