CVE-2026-54707

OnionShare contains a vulnerability (CVE-2026-54707) in the Receive mode logic prior to version 2.6.4. The root cause, per the provided description, is that ReceiveModeRequest._get_file_stream() wrote multipart file[] data to disk even when the text-only Receive mode setting was enabled. This cou...

UBUNTU-CVE-2026-54707

OnionShare Receive mode writes uploaded files even when file uploads are disabled...

Linux Distros Unpatched Vulnerability : CVE-2026-54707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - onionshare - None Ubuntu Linux - OnionShare Receive mode writes uploaded files even when file uploads are disabled CVE-2026-54707 Note that Nessu...

SUSE CVE-2026-54707

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop does not enforce the Receive mode disablefiles setting in cli/onionsharecli/web/receivemode.py, where...