localsend

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

localsend records in CISA KEV

No localsend vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Localsend 3 records HIGH

Records

3 records

TI-2025-34547 CVE-2025-54792

LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

HIGH 75

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection.

CVSS 4.0CRITICAL 9.3 Adjacent network No auth User interaction EPSS 0.00291 Published 2025-08-01 No fix listed CWE-300

TI-2025-19999 CVE-2025-27142

LocalSend path traversal vulnerability in the file upload endpoint allows nearby devices to execute arbitrary commands

LOW 37

LocalSend is a free, open-source app that allows users to securely share files and messages with nearby devices over their local network without needing an internet connection.

CVSS 4.0MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.00544 Published 2025-02-25 Fixed in 1.17.0 CWE-22

TI-2026-20316 CVE-2026-25154

LocalSend has Stored XSS in Web Share Interface via Filename

LOW 27

LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00316 Published 2026-01-30 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0