Executive brief
Remote unauthenticated attackers able to upload files in Onionshare
Affected products
- PyPI onionshare-cli
Junglewise Threat Intelligence
CVE-2021-41868: PYSEC-2026-434 - Remote unauthenticated attackers able to upload files in Onionshare
CVE-2021-41868 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: onionshare-cli (PyPI). Vendors: PyPI.
Related threats
- OnionShare incorrect authorization in Receive mode file upload sink
- OnionShare symlink traversal in Share and Website modes
- PYSEC-2026-696 - Information disclosure vulnerability in OnionShare
- PYSEC-2022-41 - OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor net
- PYSEC-2022-43 - OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor net