PT-2026-55484 · Unknown · Onionshare

CVE-2026-54707

Published

2026-07-01

Updated

2026-08-04

CVSS v3.1

5.4

Medium

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.6.4-1.1

Description In Receive mode, the software writes uploaded files to the system even when file uploads have been explicitly disabled.

Recommendations Update to version 2.6.4-1.1.

Exploit

Fix

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-54707

GHSA-V833-3823-CMHP

OPENSUSE-SU-2026:11169-1

PYSEC-2026-3586

Onionshare