Live › vulnerability › CVE-2026-120192
Presenton, an AI presentation generator, has a flaw in its desktop authentication middleware that lets a remote attacker read files under /app_data. The exploit has been published publicly.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-01 02:47 UTC. All times on this page are UTC.
Teams running Presenton up to version 0.9.11-beta, particularly where the desktop authentication middleware is reachable remotely. The sources do not describe a specific default configuration, so exposure beyond the version range is unknown.
No product ranges from the sources yet.
0.9.11-beta or earlier.0.9.12-beta or later (the sources name patch 44c8a61122b21f17642d717b0c4d6f2c54c0f180).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is able to mitigate this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. The affected component should be upgraded.
This page as .md · .json · in your agent: get_signal("CVE-2026-120192")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.