Report privately via GitHub Security Advisories: https://github.com/navistau/claude-tmux-bridge/security/advisories/new

Do not open a public issue for a suspected vulnerability.

Only the latest release is supported. Please upgrade before reporting, if possible.

• The tb and tb-vault binaries (pane driving, the scope/grant model, secret handling).
• The plugin hooks: plugin/hooks/ensure-binary.sh's binary-download path (version resolution, where it fetches from, attestation verification, how it writes into ${CLAUDE_PLUGIN_DATA}) and plugin/hooks/block-raw-tmux.sh (the PreToolUse(Bash) hook that blocks raw tmux invocations from the agent).
• The scope/grant security model: an agent reaching a pane outside its tmux window, or writing to a pane without an enforced prior read.
• Secret handling in tb-vault: a stored secret leaking to disk, to an unintended pane, or surviving past its TTL.

• Claude Code itself — report those to Anthropic, not here.
• Vulnerabilities in dependencies — report upstream to the dependency's maintainers. A heads-up here is still welcome so this project can track and update, but the fix belongs upstream.
• tmux itself, or the user's own shell configuration.