{"id":"CVE-2026-48097","summary":"NexTOR_IP_CHANGER has PATH Injection Leading to Arbitrary Command Execution","details":"NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of `shell=True` with commands that rely on executable resolution through the `PATH` environment variable. An attacker controlling the execution environment can place malicious executables such as sudo earlier in the `PATH`, resulting in execution of attacker-controlled code. Version 2.0.0 fixes the issue.","aliases":["GHSA-vx6r-vwjq-567w"],"modified":"2026-08-12T03:51:37.739028262Z","published":"2026-08-07T19:06:22.730Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48097.json","unresolved_ranges":[{"extracted_events":[{"fixed":"2.0.0"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"GitHub_M","cwe_ids":["CWE-476","CWE-78"]},"references":[{"type":"WEB","url":"https://github.com/0x5t4l1n/NexTOR_IP_CHANGER/releases/tag/v2.0"},{"type":"ADVISORY","url":"https://github.com/0x5t4l1n/NexTOR_IP_CHANGER/security/advisories/GHSA-vx6r-vwjq-567w"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48097.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48097"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/0x5t4l1n/nextor_ip_changer","events":[{"introduced":"0"},{"fixed":"90224542b70f6384b41cc9ed9414e872ad0a0bec"}],"database_specific":{"source":"REFERENCES"}}],"versions":["v1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-48097.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}