CVE-2026-48098

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using `sudo` and `shell=True` directly inside application logic. In environments where passwordless sudo (`NOPASSWD`) is enabled, privileged commands may execute silently without explicit user confirmation. Version 2.0.0 fixes the issue.

CVSS v3 7.3 HIGH

7.3^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/0x5t4l1n/NexTOR_IP_CHANGER/security/advisories/GHSA-fpxg-q9p5-5wvm

Configurations

No configuration.

History

23 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) NexTor IP Changer es una herramienta de línea de comandos que aprovecha la red Tor para rotar periódicamente la dirección IP de un usuario. Las versiones anteriores a la 2.0.0 ejecutan comandos de sistema privilegiados usando ’sudo’ y ’shell=True’ directamente dentro de la lógica de la aplicación. En entornos donde sudo sin contraseña (’NOPASSWD’) está habilitado, los comandos privilegiados pueden ejecutarse silenciosamente sin confirmación explícita del usuario. La versión 2.0.0 corrige el problema.

Information

Published : 2026-08-07 19:17

Updated : 2026-10-23 20:10

NVD link : CVE-2026-48098

Mitre link : CVE-2026-48098

CVE.ORG link : CVE-2026-48098

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-250

Execution with Unnecessary Privileges

{"id": "CVE-2026-48098", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48098", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-07T20:55:03.974699Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.5, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "0x5t4l1n", "product": "NexTOR_IP_CHANGER", "versions": [{"status": "affected", "version": "< 2.0.0"}]}]}], "published": "2026-08-07T19:17:47.780", "references": [{"url": "https://github.com/0x5t4l1n/NexTOR_IP_CHANGER/security/advisories/GHSA-fpxg-q9p5-5wvm", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-78"}, {"lang": "en", "value": "CWE-250"}]}], "descriptions": [{"lang": "en", "value": "NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using `sudo` and `shell=True` directly inside application logic. In environments where passwordless sudo (`NOPASSWD`) is enabled, privileged commands may execute silently without explicit user confirmation. Version 2.0.0 fixes the issue."}, {"lang": "es", "value": "NexTor IP Changer es una herramienta de l\u00ednea de comandos que aprovecha la red Tor para rotar peri\u00f3dicamente la direcci\u00f3n IP de un usuario. Las versiones anteriores a la 2.0.0 ejecutan comandos de sistema privilegiados usando \u2019sudo\u2019 y \u2019shell=True\u2019 directamente dentro de la l\u00f3gica de la aplicaci\u00f3n. En entornos donde sudo sin contrase\u00f1a (\u2019NOPASSWD\u2019) est\u00e1 habilitado, los comandos privilegiados pueden ejecutarse silenciosamente sin confirmaci\u00f3n expl\u00edcita del usuario. La versi\u00f3n 2.0.0 corrige el problema."}], "lastModified": "2026-10-23T20:10:00.160", "sourceIdentifier": "security-advisories@github.com"}