Please report a vulnerability privately, through GitHub's private vulnerability reporting, not in a public issue. Include what an attacker could do, how to reproduce it, and the commit you tested.

The env's MCP tools, data plane and live view have no authentication. Run it on a local machine or a private network, and don't expose its port publicly.