Pastebin Application Vulnerability in Paaster by Ward Pearce
CVE-2026-68511

6.3MEDIUM

Key Information:

Vendor

Wardpearce

Status
Paaster
Vendor
CVE Published:
11 November 2026

What is CVE-2026-68511?

The vulnerability in the Paaster application arises from a flaw in its 'view once' paste mode, also known as the burn-after-reading feature. In versions prior to 3.3.0, this feature can be bypassed due to a lack of proper atomicity in handling requests. When multiple simultaneous requests are made, the application incorrectly allows all of them to access the paste before it is marked as read, leading to potential unauthorized access to sensitive data. This significant security issue has been addressed and resolved in version 3.3.0, making it crucial for users to upgrade to this version for enhanced data protection.

Affected Version(s)

paaster < 3.3.0

References

https://github.com/WardPearce/paaster/security/advisories...
x_refsource_CONFIRM
https://github.com/WardPearce/paaster/releases/tag/v3.3.0
x_refsource_MISC

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.