We take security very seriously at ioquake3. We welcome any peer review of our 100% free software source code to ensure nobody's ioquake3 clients or servers are ever compromised or hacked.
In order to give the community time to respond and upgrade we strongly urge you report all security issues privately. Please contact zachary@ioquake.org directly to provide details and repro steps and we will respond ASAP.