CVE-2026-54706: OnionShare symlink traversal in Share and Website modes

CVE-2026-54706 · Severity: medium · CVSS 4.8 · Published 2026-07-31

OnionShare, a tool used for secure and anonymous file sharing and website hosting over the Tor network, was found to have a flaw in how it handles shared folders. If a user shares a folder that contains a symbolic link (a shortcut to another file), the application may follow that link and allow a remote recipient to download files from the user's computer that were never intended to be shared. This could lead to the exposure of sensitive local data if an attacker can influence the contents of a shared directory or if a user unknowingly shares a folder containing such links.

Technologies: onionshare-cli (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2026-54706 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-54706 being exploited in the wild.
How severe is CVE-2026-54706?
Medium severity, with a CVSS score of 4.8, published 31 July 2026.
Which products and versions are affected?
Onionshare < 2.6.4; onionshare-cli (PyPI) < 2.6.4, ECOSYSTEM:introduced=0,fixed=2.6.4.
Is there a fix for CVE-2026-54706?
Yes. onionshare-cli (PyPI): upgrade to 2.6.4 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-54706 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-54706?
Check whether you run Onionshare or onionshare-cli (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • onionshare-cli (PyPI): upgrade to 2.6.4 or later
    pip install "onionshare-cli>=2.6.4"

Technical details

A symbolic link (symlink) traversal vulnerability exists in OnionShare CLI and Desktop versions prior to 2.6.4. The root cause is located in `SendBaseModeWeb.set_file_info()` and `stream_individual_file()` within `cli/onionshare_cli/web/send_base_mode.py`, which fail to validate if a file is a symlink before indexing or streaming it. An attacker who can influence the contents of a directory shared by a victim (or a victim who unknowingly shares a directory containing untrusted symlinks) can cause the application to serve files from the local filesystem that are outside the shared root. Exploitation requires the attacker to have access to the OnionShare service (URL and private key) and for the victim to initiate the sharing session. The issue is resolved in version 2.6.4 by implementing canonical path checks and rejecting symlinks.

Affected products

  • OnionShare OnionShare < 2.6.4
  • OnionShare onionshare-cli < 2.6.4

Identifiers

  • CVE-2026-54706
  • GHSA-22p9-r2f5-22mf
  • PYSEC-2026-3585

Timeline

  • 2026-05-30: patched: Fix committed to repository
  • 2026-06-09: advisory: GitHub Security Advisory published
  • 2026-07-31: disclosed: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.