PatchTheCVECVE-2007-4174: Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051,
CVE-2007-4174 is a medium-severity flaw (CVSS 5.8) affecting tor. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node.
Why this priority
- EPSS top 6%: very likely to be exploited
- Public exploit reference
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.8 (Medium) |
| EPSS exploit chance | 6.2% (top 6%) |
| CISA exploited list | No |
| Weakness | CWE-264 |
| Published | 2007-08-07 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Exploit-DB: Tor 0.1.2.15 - ControlPort Missing Authentication Unauthorized Access
- Exploit-DB: Tor < 0.1.2.16 - ControlPort Remote Rewrite
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2007-4174?
tor: upgrade to newer than 0.1.2.15. Exact commands for each OS are on this page.
Is CVE-2007-4174 being exploited?
CVE-2007-4174 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2007-4174 affect?
CVE-2007-4174 affects tor. Severity is medium (CVSS 5.8). Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via
How urgent is CVE-2007-4174?
Priority 49/100. EPSS top 6%: very likely to be exploited; Public exploit reference
Related CVEs
- CVE-2026-44603 LOW 3.7 UPGRADE Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.
- CVE-2026-44597 LOW 3.7 UPGRADE Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in it
- CVE-2026-44600 LOW 3.7 UPGRADE Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka
- CVE-2026-44601 LOW 3.7 UPGRADE Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a doub
- CVE-2026-44602 LOW 3.7 UPGRADE Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-00