Linktree Vulnerability Disclosure

generated: '2026-07-19'
method: searched
probe: true
source: https://linktr.ee/s/about/trust-center/
policy:
- https://bugcrowd.com/engagements/linktree-mbb-og
program:
  type: public-bug-bounty
  platform: Bugcrowd
  name: Linktree Public Bug Bounty
  url: https://bugcrowd.com/engagements/linktree-mbb-og
  status: 200
contact: []
security_txt:
  present: false
  note: no RFC 9116 security.txt on linktr.ee or mcp.linktr.ee (both 404).
evidence:
- source: https://linktr.ee/s/about/trust-center/
  kind: trust-center-page
  detail: Trust Center links a "Public Bug Bounty" to the Bugcrowd engagement.
- source: https://bugcrowd.com/engagements/linktree-mbb-og
  kind: bug-bounty-program
  detail: Bugcrowd engagement page resolves 200.
note: >-
  The automated probe (probe-security-programs.py) missed this because Linktree's trust and
  disclosure pages live under /s/about/trust-center/ rather than the conventional /security or
  /trust paths. Recorded here from a manual search of the Trust Center.