The Certadel Agent holds ACME account keys, DNS provider credentials and private keys, and runs with administrative rights on the hosts it manages, so we take reports seriously.

Please do not open a public issue. Use GitHub's private reporting instead: Security → Report a vulnerability on the repository the issue affects (this one for the engine, plugins and console; a platform repository for its installer).

Include the affected version, platform, and steps to reproduce. We aim to acknowledge reports within 3 business days and will keep you updated until a fix ships.

Security fixes are made on the latest release line only. Upgrade by installing the newest package for your platform; upgrades keep your data in place.