Please do not disclose security vulnerabilities in public issues or pull requests. Follow the FlagOS security reporting guidance and email contact@flagos.io.

Include the affected repository (flagos-ai/FlagTrain), revision or version, impact, relevant environment details, and reproduction steps when available. Remove credentials, personal information, and unrelated private data from any logs or examples.

Coordinate public disclosure with the maintainers so they can investigate and prepare a fix.

安全漏洞请通过 contact@flagos.io 私下报告， 不要提交包含漏洞细节的公开 Issue 或 PR。请注明仓库、受影响的版本或提交、 影响范围、环境信息和可用的复现步骤，并移除日志中的凭据及无关隐私信息。 请与维护者协调公开披露时间。