Please open a GitHub Security Advisory on this repo instead of a public issue. Include ggrun version, platform, and steps to reproduce.
In scope: the ggrun launcher itself — install scripts (install.sh,
install.ps1, setup.sh), the CLI/TUI, and backend-launch argument handling.
Out of scope: llama.cpp and ik_llama.cpp themselves. Report issues in those backends to their own projects.
Don't open a public issue or PR for an undisclosed vulnerability.