CVE-2026-48097

HighCVSS 7.8

Published: 07/08/2026(UTC)Updated: 07/08/2026(UTC)Translated: 08/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

NexTor IP Changer before version 2.0.0 has a command execution vulnerability due to unsafe use of `shell=True` with commands that rely on executable resolution through the PATH environment variable. An attacker controlling the execution environment can place malicious executables earlier in the PATH, resulting in execution of attacker-controlled code.

Risk Assessment

An attacker can execute arbitrary code in the context of the user running the tool, potentially leading to system compromise.

Recommendation

Upgrade NexTor IP Changer to version 2.0.0, which fixes the issue.

Other vulnerabilities in NexTor IP Changer

CVE-2026-48098High
NexTor IP Changer before version 2.0.0 executes privileged system commands using `sudo` and `shell=True` directly inside application logic. In environments where passwordless sudo (NOPASSWD) is enabled, privileged commands may execute silently without explicit user confirmation.

Original NVD description (English source)

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of `shell=True` with commands that rely on executable resolution through the `PATH` environment variable. An attacker controlling the execution environment can place malicious executables such as sudo earlier in the `PATH`, resulting in execution of attacker-controlled code. Version 2.0.0 fixes the issue.