Please don't open a public issue for a vulnerability. Report it privately through a security advisory with a description, steps to reproduce, the version, and the impact.

agentty is pre-1.0, so fixes land in the latest release only. Update first, it may already be fixed.

More on the security model: https://agentty.org/security