CVE-2026-48098
Received Received - Intake

Privileged Command Execution in NexTor IP Changer

Publication date: 2026-08-07

Last updated on: 2026-08-07

Assigner: GitHub, Inc.

Description
NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using `sudo` and `shell=True` directly inside application logic. In environments where passwordless sudo (`NOPASSWD`) is enabled, privileged commands may execute silently without explicit user confirmation. Version 2.0.0 fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-07
Last Modified
2026-08-07
Generated
2026-08-07
AI Q&A
2026-08-07
EPSS Evaluated
N/A
NVD
CVE-2026-48098
EUVD
EUVD-2026-54604

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
0x5t4l1n nextor_ip_changer to 2.0.0 (exc)
0x5t4l1n nextor_ip_changer 2.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-250 The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NexTor IP Changer is a tool that rotates a user's IP address via the Tor network. Versions before 2.0.0 use sudo and shell=True in application logic, allowing privileged commands to run without user confirmation if passwordless sudo is enabled. This creates a risk of OS command injection and unnecessary privilege execution.

Detection Guidance

Check if NexTor IP Changer versions prior to 2.0.0 are installed. Run: 'nex-tor-ip-changer --version' to verify the version. Inspect sudoers configuration for passwordless sudo entries related to NexTor IP Changer using 'sudo -l'.

Impact Analysis

An attacker could exploit this to execute arbitrary system commands with elevated privileges, potentially gaining control over the system or accessing sensitive data. The impact includes high confidentiality and integrity loss, though availability impact is low.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and access controls. Compliance may be compromised due to potential confidentiality and integrity breaches.

Mitigation Strategies

Update NexTor IP Changer to version 2.0.0 or later immediately. Remove any passwordless sudo entries for NexTor IP Changer in the sudoers file. Monitor system logs for unexpected privileged command executions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-48098. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart