Skip to content
OpenAdvisories

Vendor

localsend

3 known vulnerabilities.

Products

localsend 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-25154

    LocalSend has Stored XSS in Web Share Interface via Filename

    LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection. In versions up to and including 1.17.0, when a user initiates a "Share via Link" session, t…

    localsend localsend
  • Medium 6.3
    CVE-2025-27142

    LocalSend path traversal vulnerability in the file upload endpoint allows nearby devices to execute arbitrary commands

    LocalSend is a free, open-source app that allows users to securely share files and messages with nearby devices over their local network without needing an internet connection. Prior to version 1.17.0, due to the missing sanitization of the path in the `POST …

    localsend localsend