Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Tor versions before 0 can be exploited remotely
published 4 days ago
Summary
The Tor software from cleanstart that is older than version 0 may let an attacker run code on your system or intercept traffic. This could expose the privacy of your users and compromise your network. Upgrade the Tor package to the latest release as soon as possible and ensure automatic updates are enabled.
What to do
- Update cleanstart tor to version 0.4.2.7-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | tor |
< 0.4.2.7-r0 Fix: upgrade to 0.4.2.7-r0
|
Original advisory text
Tor before 0
Security vulnerability affects the tor package. Tor before 0.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-BO75142 · OSV
Track software like this
Free during beta