CVE-2026-10804

A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation leads to use of weak hash. Local access is required to approach this attack. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.

• CWE-327
• CWE-328

• https://github.com/streamlit/streamlit/Product
• https://github.com/streamlit/streamlit/issues/14622Issue Tracking, Mitigation, Patch
• https://github.com/streamlit/streamlit/pull/14635Issue Tracking, Patch
• https://vuldb.com/cve/CVE-2026-10804Third Party Advisory, VDB Entry
• https://vuldb.com/submit/831508Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/368253Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/368253/ctiPermissions Required, VDB Entry

Published

Jun 4, 2026

Last Modified

Jul 22, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10796nvm (Node Version Manager) through 0.40.4 executes arbitrary…7.5
• CVE-2026-1080GitLab has remediated an issue in GitLab EE affecting all ve…4.3
• CVE-2026-10800A weakness has been identified in PaddlePaddle FastDeploy up…3.6
• CVE-2026-10801A security vulnerability has been detected in modelscope ms-…3.6
• CVE-2026-10802A vulnerability was detected in keystonejs keystone up to 20…4.3
• CVE-2026-10803A flaw has been found in MLflow up to 3.10.0. This issue aff…3.6
• CVE-2026-10805A flaw was found in NetworkManager. This local privilege esc…6.7
• CVE-2026-10806A vulnerability was found in mjperpinosa stumasy. The affect…6.3
• CVE-2026-10807A vulnerability was determined in mjperpinosa stumasy. The i…6.3
• CVE-2026-10808A vulnerability was identified in itsourcecode Fees Manageme…6.3
• CVE-2026-10809A security flaw has been discovered in itsourcecode Fees Man…6.3
• CVE-2026-1081The Set Bulk Post Categories plugin for WordPress is vulnera…4.3