CVE-2026-48098: NexTOR IP Changer Unsafely Uses sudo and shell=True
NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using sudo and shell=True directly inside application logic. In environments where passwordless sudo (NOPASSWD) is enabled, privileged commands may execute silently without explicit user confirmation. Version 2.0.0 fixes the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
NexTOR IP Changerto a version that resolves this vulnerability.Fixed in 2.0.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-48098?
The severity of CVE-2026-48098 is classified as high with a score of 7.3.
How do I fix CVE-2026-48098?
To fix CVE-2026-48098, update NexTor IP Changer to version 2.0.0 or later.
What are the consequences of CVE-2026-48098?
CVE-2026-48098 can lead to OS command injection due to insecure handling of privileged commands.
Which versions of NexTor IP Changer are affected by CVE-2026-48098?
CVE-2026-48098 affects all versions of NexTor IP Changer prior to 2.0.0.
Can CVE-2026-48098 be exploited remotely?
Yes, CVE-2026-48098 can be exploited remotely if the application is running in an environment with passwordless sudo permissions.