ContextKeep

The server and web UI default to binding on '0.0.0.0' (all network interfaces) on ports 5100 and 5000 respectively, making them accessible from the local network by default. While this enables features like remote SSH access, users should be aware that these services are network-exposed, which could be a privacy or security concern if not intended or if the host machine is not adequately secured. Memory keys used for filenames are sanitized via MD5 hashing, mitigating direct path traversal vulnerabilities. The installation scripts use standard system commands and `sudo`, which require careful review but do not show obvious direct command injection vulnerabilities from user input.