一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-48098 [HIGH] – NexTor IP Changer is a command-line tool that leverages the Tor network to periodically ro

未分类
📑 文章目录

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user’s IP address. Versions prior to 2.0.0 execute privileged system commands using `sudo` and `shell=True` directly inside application logic. In environments where passwordless sudo (`NOPASSWD`) is enabled, privileged commands may execute silently without explicit user confirmation. Version 2.0.0 fixes the issue.