CVE-2007-4099: Tor

Medium severity, CVSS 5.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks.

Affected products

• Tor Tor: version 0.1.0.10 only; version 0.1.0.11 only; version 0.1.0.12 only; version 0.1.0.13 only; version 0.1.0.14 only; version 0.1.0.18 only; …

Published 2007-07-30. Last modified 2026-06-16.