Orion opens files from cameras and the web and can run a local MCP server, so a malformed file or a request that escapes its folder is worth reporting.

Report privately: use Report a vulnerability on the Security tab, or email alpha@bankoti.dev. Please don't open a public issue.

Include the Orion version, macOS version, and a file or steps that reproduce it. You'll get a reply within a week. Only the newest alpha gets fixes.