Version 4.9.4 is available, see bugs fixed in the ChangeLog v4.9.4.

This version fixes two critical security vulnerabilities: authentication bypass in relay plugin (protocols "api" and "weechat) and a write of logger file outside of configured path (path traversal).

Upgrade is recommended for all users.