# Security Policy

## Supported Versions

mcp-agent receives security updates for v0.2.x

| Version | Supported          |
| ------- | ------------------ |
| 0.2.x   | :white_check_mark: |
| < 0.2   | :x:                |

## Reporting a Vulnerability

Please report security vulnerabilities privately using [GitHub's security advisory feature](https://github.com/lastmile-ai/mcp-agent/security/advisories/new).

Do not open public issues for security concerns.

## Acknowledgements

Special thanks to [CoderShady](https://github.com/CoderShady) for responsibly disclosing a critical remote code execution vulnerability (CVE-2025-55182) in mcp-c – December 2025
