Please do not publish exploit details in a public issue. Open a GitHub issue with minimal non-sensitive reproduction information and mark it clearly as a security report, or contact the repository owner privately through GitHub if sensitive details are required.

Needle targets personal/local file discovery rather than enterprise document management. Search is deliberately lightweight and deterministic.

Index creation and searching happen locally. Needle does not need a hosted search service or account.