CVE-2026-54706 | OnionShare up to 2.6.3 Send Base Mode send_base_mode.py information disclosure

July 31, 2026 Yanac

A vulnerability categorized as problematic has been discovered in OnionShare up to 2.6.3. The impacted element is the function SendBaseModeWeb.set_file_info/stream_individual_file of the file cli/onionshare_cli/web/send_base_mode.py of the component Send Base Mode. Such manipulation leads to information disclosure.

This vulnerability is documented as CVE-2026-54706. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More