Presenton desktop exposed stored AI provider keys through its local API

The Presenton Electron application started local frontend and backend services, with authentication disabled by the tested desktop default. A separate file-serving path exposed the app data directory, which the researcher says contained plaintext model provider credentials, session material and presentation artifacts. The October 3 controlled report showed local downloads, while cross-origin programmatic theft required additional browser-origin or rebinding conditions. The issues are related but technically distinct: the authentication default opens a request boundary, and the static mount makes sensitive files reachable.

The local API and its file-serving route are separate preconditions. A service may have no login boundary but still be reachable only from the device; data theft by an unrelated website adds origin and rebinding questions. A complete test should first establish which endpoint reads the stored model key and then test whether an untrusted browser can reach that endpoint.