CyberRota Analysis
AI-GeneratedNexTor IP Changer versions prior to 2.0.0 are vulnerable to a command execution flaw stemming from the unsafe use of `shell=True`, allowing attackers to manipulate the `PATH` environment variable and execute arbitrary code. This high-severity vulnerability poses significant risks for users relying on this tool for IP address rotation, particularly in environments where command execution can be exploited. Users and administrators of affected versions should prioritize upgrading to version 2.0.0 to mitigate potential security threats.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of `shell=True` with commands that rely on executable resolution through the `PATH` environment variable. An attacker controlling the execution environment can place malicious executables such as sudo earlier in the `PATH`, resulting in execution of attacker-controlled code. Version 2.0.0 fixes the issue.