Skip to content

Security EN

Ayerdi edited this page Aug 12, 2026 · 5 revisions

🔒 Security

⚠️ Unofficial API

The G HUB WebSocket (ws://localhost:9010) is not an official Logitech API. It's a local interface used by third-party projects. Logitech can change it in future G HUB versions.

If AutoSwitch stops working after a G HUB update, check AGENT.md in the repo for the mechanism and how to rebuild it.

🔐 NirSoft download

  • The installer downloads svcl-x64.zip from NirSoft only if it is not already installed.
  • It verifies its SHA-256 before running it.
  • If NirSoft ships a new version the hash may change and the installer fails safely (runs nothing).
  • Don't remove that check.

🛡️ Reporting a vulnerability

See SECURITY.md in the repo.

Clone this wiki locally