Please report security issues privately, through GitHub's private vulnerability reporting on this repository, rather than in a public issue.

What tabby-rdp does on the machines involved, and what to know about it (GNOME Remote Desktop listening on all interfaces, where credentials are kept, the local proxy), is described in docs/architecture.md.