Farhand is a fast-moving project. Only the latest tagged release receives security updates.

Please do not open a public GitHub issue for security reports.

Use GitHub's private vulnerability reporting (Repo → Security → Report a vulnerability). Reports are triaged within 72 hours.

When reporting, include:

1. fh / fhd version (fh --version)
2. OS, architecture, and whether TLS (--tls) was in use
3. A minimal reproduction (commands, config, network topology)
4. Impact assessment from your perspective

fhd is a daemon that executes arbitrary commands sent by an authenticated client. Treat it like you would treat sshd with password auth:

• A token is required by default. Since 1.8.0, fhd refuses to start without a token unless --allow-unauthenticated is passed explicitly (development only). Tokens are compared in constant time and never logged.
• Transport: use --tls (with fingerprint pinning or mTLS), or front the port with a tunnel (ssh -L, cloudflared access tcp, Tailscale/WireGuard). Without TLS, tokens and all traffic are transmitted in cleartext — the daemon warns about this on non-loopback binds.
• Network: bind fhd to a loopback/private interface and reach it via tunneling where possible. Do not expose port 9876 to the public internet. Concurrent connections are capped (--max-connections, default 32).
• Shared hosts: any client holding the token can access every project workspace on the agent. Do not share one daemon across mutually untrusting users.
• Environment: fh forwards your local environment by default. A denylist excludes session/OS variables, infrastructure credential prefixes (AWS_, GITHUB_, …) and credential suffixes (*_TOKEN, *_SECRET, …). Run fh --print-env to see exactly which variable names would be forwarded; use --no-env plus explicit -e VAR=... when working with sensitive ambient credentials.

• We will acknowledge, triage, and publish fixes with coordinated release notes.
• Security fixes are released as patch versions with a security: changelog entry.
• Credit is given to reporters by default unless anonymity is requested.