Launchpad.net

CVE 2016-5026

hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.

See the CVE page on Mitre.org for more details.