CVE-2016-5026

Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 0.9.1

Description The issue allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory. This is related to the hs.py component in OnionShare.

Recommendations For versions prior to 0.9.1, update to version 0.9.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the /tmp/onionshare directory to prevent unauthorized modifications.