Please use GitHub private vulnerability reporting or email gordon@mickel.tech. Do not open a public issue for a vulnerability.

The Beeper launcher enables Electron's debugging protocol on a random loopback port while Beeper is running. Processes running as the same local user can reach that port. The integration never binds it to a LAN address.