# Security Policy

This repository documents an authorized local verification of a MyBB privilege-boundary issue.

Use the PoC only against systems you own or have explicit permission to test. If you are validating a production forum, coordinate with the forum owner and preserve evidence without exposing user data.

Suggested disclosure path: report MyBB core security issues through the MyBB Project security process at https://mybb.com/security/.