Muse
6a5ee8f77b
Display L-UI; panel binary/process l-ui, agent lui-agent. Dirs /usr/local/l-ui, /etc/l-ui, /var/log/l-ui; DB /etc/l-ui/l-ui.db (name file drives it via GetName), probe.db beside it, cert /etc/l-ui/cert, bin /usr/local/l-ui/bin. Services l-ui.service / lui-agent.service, OpenRC lui-agent, l-ui.sh, cmd/lui-agent. Env prefix XUI_ -> LUI_ (code reads new prefix only). Release assets l-ui-linux-* / lui-agent-linux-*; Gitea repo rogue/l-ui is a placeholder pending user confirmation (see selfupdate.go note). Go module path github.com/mhsanaei/3x-ui/v3 intentionally kept. Versions unchanged: panel V2.6.0 / agent A2.5.0.
885 B
Security Policy
Reporting a vulnerability
Do not open a public issue for anything you believe is exploitable — an authentication bypass, remote code execution, injection, secret or credential exposure, privilege escalation. A public report gives attackers a head start against every L-UI deployment.
Instead, use GitHub's private vulnerability reporting: open this repository's Security tab and click Report a vulnerability. Include the affected L-UI version, reproduction steps, and the impact you see. You will receive replies in the advisory thread.
There is no bug-bounty program. Fixes ship in the next release, and the advisory is published after a fixed version is available.
Supported versions
Only the latest release receives security fixes. Update with the install script or your package channel and confirm the problem still exists before reporting.