CVE-2026-48097

Name of the Vulnerable Software and Affected Versions NexTor IP Changer versions prior to 2.0.0

Description NexTor IP Changer is a command-line tool used to periodically rotate a user's IP address via the Tor network. The software contains a command execution flaw caused by the unsafe use of shell=True when executing commands that depend on the PATH environment variable for executable resolution. An attacker who can control the execution environment may place a malicious executable, such as sudo, earlier in the PATH to execute arbitrary code.

Recommendations Update to version 2.0.0.