Responsible Disclosure

LightBurn Software welcomes reports relating to:

• Security vulnerabilities
• Unauthorized API access
• Authentication weaknesses or bypasses
• Authorization or capability bypasses
• Secret or token exposure
• Capability escalation
• Unexpected modification of project or machine-related parameters
• API implementation flaws
• Dangerous or unexpected machine interactions
• Documentation errors affecting safe use

Please report concerns privately.

Documentation errors that do not affect safe use — unclear wording, omissions, inaccuracies, or general questions about the API — do not need to be reported privately, and may be raised as issues on the API repository instead.

We ask that researchers and developers avoid public disclosure until we have had a reasonable opportunity to investigate and respond.

Good-faith research and responsible reporting are appreciated.