---
id: "CVE-2026-120192"
kind: "vulnerability"
aliases: ["CVE-2026-120192"]
title: "Presenton: desktop authentication middleware exposes files under app_data"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-apps", "ai-tooling", "presenton", "self-hosted"]
not_affected_if: ["version-0.9.12-beta-or-later"]
published_at: "2026-11-01T02:16:59+00:00"
first_seen_at: "2026-11-01T02:47:27+00:00"
updated_at: "2026-11-01T02:47:49+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120192", "first_seen_at": "2026-11-01T02:47:27+00:00"}]
---

# Presenton: desktop authentication middleware exposes files under app_data

Presenton, an AI presentation generator, has a flaw in its desktop authentication middleware that lets a remote attacker read files under /app_data. The exploit has been published publicly.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the Presenton version in use and whether it is `0.9.11-beta` or earlier.
- Confirm whether the desktop authentication middleware is reachable from the network.

## Fix

- Upgrade Presenton to `0.9.12-beta` or later (the sources name patch 44c8a61122b21f17642d717b0c4d6f2c54c0f180).

## Timeline

- 2026-11-01T02:47:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120192

## From the sources

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.9.12-beta is able to mitigate this issue. The name of the patch is 44c8a61122b21f17642d717b0c4d6f2c54c0f180. The affected component should be upgraded.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_