AutoPHD is experimental, pre-1.0 research software. Security fixes are applied to the latest code on the default branch; older commits and untagged snapshots are not supported.

Please use GitHub's private Report a vulnerability flow in the repository's Security tab. Do not open a public issue for an unpatched vulnerability and do not include live credentials, private datasets, or exploit data in public discussions.

Include the affected commit, operating system, reproduction steps, impact, and any suggested mitigation. Maintainers will acknowledge a complete report when they are able, assess scope, and coordinate disclosure after a fix is available.

• The Web UI is intended for local use. Binding it to a public interface can expose task controls and research data.
• Treat model API keys and provider credentials as secrets. Never commit them.
• Agent-generated commands, downloaded papers, and external tool output are untrusted inputs. Review them before execution or publication.
• AutoPHD does not provide a hardened multi-tenant sandbox or a production security guarantee.