CVE-2026-10804: Streamlit Palette hashing.py weak hash
A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation leads to use of weak hash. Local access is required to approach this attack. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10804?
The severity of CVE-2026-10804 is classified as low with a score of 3.6.
How do I fix CVE-2026-10804?
To fix CVE-2026-10804, update Streamlit to the latest version that addresses this vulnerability.
What causes CVE-2026-10804?
CVE-2026-10804 is caused by a weak hash being used in the Palette Handler component of the Streamlit library.
Is local access required to exploit CVE-2026-10804?
Yes, local access is required to exploit CVE-2026-10804 due to its nature.
What impact does CVE-2026-10804 have on my application?
CVE-2026-10804 may lead to potential data integrity issues due to the use of a weak hash in caching.