CVE-2026-48098

HighCVSS 7.3

Published: 07/08/2026(UTC)Updated: 07/08/2026(UTC)Translated: 08/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

NexTor IP Changer before version 2.0.0 executes privileged system commands using `sudo` and `shell=True` directly inside application logic. In environments where passwordless sudo (NOPASSWD) is enabled, privileged commands may execute silently without explicit user confirmation.

Risk Assessment

This can lead to unauthorized execution of commands with elevated privileges, posing a serious security risk.

Recommendation

Upgrade NexTor IP Changer to version 2.0.0, which fixes the issue.

Other vulnerabilities in NexTor IP Changer

CVE-2026-48097High
NexTor IP Changer before version 2.0.0 has a command execution vulnerability due to unsafe use of `shell=True` with commands that rely on executable resolution through the PATH environment variable. An attacker controlling the execution environment can place malicious executables earlier in the PATH, resulting in execution of attacker-controlled code.

Original NVD description (English source)

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using `sudo` and `shell=True` directly inside application logic. In environments where passwordless sudo (`NOPASSWD`) is enabled, privileged commands may execute silently without explicit user confirmation. Version 2.0.0 fixes the issue.