The desktop app binds to loopback and does not execute inspected EXE files. Optional project tests must be enabled explicitly and use supported Windows isolation.
Report a suspected vulnerability to siriusxai@siriusxai.com. Include reproducible details without private customer data.