Llama Deck controls explicitly registered Docker containers and mounts the Docker socket. Anyone who can reach the management API can start, stop, or recreate those containers. Treat the UI as an administrative service.

• Bind it only to a trusted LAN, VPN, or authenticated reverse proxy.
• Never publish port 8090 directly to the internet.
• Keep model volume mounts read-only whenever possible.
• Review registry changes before deployment.
• Do not add untrusted images or writable host paths to a launch template.

The browser can edit only documented, typed llama.cpp arguments. It cannot edit the image, entrypoint, model path, volume mounts, devices, ports, capabilities, or network mode.

Please use GitHub private vulnerability reporting for the repository. Do not open a public issue for an unpatched vulnerability.