Please report security concerns privately to the maintainer.
Do not file public issues for actively exploitable vulnerabilities, malware reports, signing concerns, or reports involving private server details. Include the affected version, operating system, reproduction steps, and any relevant release artifact hashes when possible.
This project is a downstream AGPLv3 fork of RustDesk. Security issues that affect the upstream RustDesk codebase should also be reported to the upstream RustDesk project.
This fork's intended changes are limited to bundled configuration for a self-hosted RustDesk server and fork-specific release/signing documentation.
Windows release signing is governed by CODE_SIGNING_POLICY.md.