CVE-2016-5026: Onionshare

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.

Affected products

• Onionshare Onionshare: up to and including 0.9.0

Published 2017-01-30. Last modified 2026-06-17.