Security fixes are provided for the latest release only.

Please use the repository's private Security → Report a vulnerability form. Do not include exploit details, personal paths, IP addresses, logs, or screenshots in a public issue.

If private reporting is not yet enabled, contact the maintainer privately and provide:

• affected version;
• Windows version;
• steps to reproduce;
• expected and actual behavior;
• a minimal proof of concept with personal information removed.

• The application requires administrator permission because it manages SMB shares, NTFS ACLs, the Server service, and a Windows Firewall rule.
• The default is read-only and LocalSubnet.
• Any changes a global TCP 445 firewall rule and can affect every SMB share on the computer.
• The application never enables SMB1, anonymous access, or guest access.
• The application refuses to share a folder that contains its own executable.
• Runtime logs and ACL state are stored under %LOCALAPPDATA%\FolderShareManager and must not be attached to public reports without redaction.