Endpoint findingView consolidated app →
← Findings by source

LM Studio

Endpoint Element Labs · Local runtime · process: LM Studio.exe · software: LM Studio · local_server: 1234

Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Finding · Open
Risk score
38
Medium
People
1
Accounts seen on devices
Devices
1
1 account · 30 days
Last seen
3 d ago
First seen Aug 30, 2026
endpointlocal-inference
Next steps

Recommended actions

  1. 01Local inference keeps prompts on the device but sits outside every SaaS control: no DLP, no audit trail, and models of unknown provenance. Confirm these device is managed and decide whether local AI is allowed at all.
Endpoint

What Defender for Endpoint saw

Processes · 1Installed software · 1Local inference server · 1
Devices
  • WS-RESEARCH-01
Processes
LM Studio.exe1
Installed software
LM Studio 0.3.241 device
Who

People

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

PersonDepartmentSourceSign-ins · 30 dGranted
[email protected]
[email protected]
n/aDevice telemetry0No direct grant
Why

Evidence

  1. endpoint_telemetry · Sep 11, 2026
    Defender for Endpoint saw LM Studio on 1 device (1 account) in 30 days: 1 process observation; installed on 1 devices; local inference server on port 1234
    Detail
    {
  "domains": [],
  "signals": {
    "network": 0,
    "process": 1,
    "software": 1,
    "extension": 0,
    "model_file": 0,
    "local_server": 1
  },
  "software": [
    {
      "name": "LM Studio",
      "devices": 1,
      "version": "0.3.24"
    }
  ],
  "processes": [
    {
      "name": "LM Studio.exe",
      "count": 1
    }
  ],
  "extensions": [],
  "deviceNames": [
    "WS-RESEARCH-01"
  ]
}