CVE-2026-104617

No fix known EPSS <1%CVSS 5.1

There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.