Tor Network Faces Critical Security Flaws Requiring Immediate Updates

• •Tor released critical version 0.4.9.13 on September 23, 2026, with high-severity fixes.
• •The update addresses vulnerabilities affecting all components of the Tor network, including relays and onion services.
• •Users are urged to update immediately, especially those using Tor Browser version 15.0.23, which may lack these fixes.

On September 23, 2026, the Tor Project released version 0.4.9.13 to address high-severity vulnerabilities affecting relays, clients, and onion services. This emergency update follows a prior release on September 8, indicating ongoing security issues. The release notes detail 16 categories of fixes, with 10 vulnerabilities assigned TROVE identifiers, but full technical details are withheld to prevent exploitation. Key issues include potential memory corruption vulnerabilities, which could allow attackers to crash or take control of relays, and flaws that could link browsing activity across sessions, undermining user anonymity. The Tor Project has not confirmed if these vulnerabilities allow remote code execution. Users of the Tor Browser, particularly version 15.0.23, are advised to update to ensure they have the latest security patches. No active exploits have been reported in the wild as of now.