I ssh to my AWS instances via WinSCP and it has public-private key authentication, password authentication is disabled. All the sessions are saved on WinSCP, so I click on the IP of the machine and I get logged straight in without entering any information.
I am not considering the threats which require physical access of my laptop. But I am wondering if there are any known vulnerabilities or attack vectors specific to WinSCP which can leak private keys from my saved sessions?
Edit 1: The private key does not have a passphrase.