Please report a vulnerability in Kernel AI privately, through GitHub's private vulnerability reporting: open the repository's Security tab and choose Report a vulnerability (https://github.com/dane1599d/kernel-ai/security/advisories/new). Do not open a public issue, pull request or discussion about it.

Say what is affected (the commit or release, and the part: the kernel, a service, the shell or the AI's actions), how to reproduce it, and what it lets someone do. We answer as soon as we can, agree a date for disclosure with you, and credit you in the advisory unless you ask us not to.

Kernel AI is pre-release (0.1.0-dev): fixes land on main, and there are no older releases to patch yet. When releases begin, this page will say which ones get fixes.