Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: NixOS Nix 2.28.8, 2.30.6 and 3 more versions Clear all filters
TI-2026-73872 CVE-2026-110452 · GHSA-ggvw-xgw8-9cc9

Incorrect store ownership in Nix multi-user installer

Priority LOW 18

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00131 Published 2026-10-14 Fixed in 2.28.8, 2.30.6 +3 CWE-708
TI-2026-73871 CVE-2026-110451 · GHSA-5h53-jg3j-22gg

Seatbelt sandbox escape in Nix and Lix builds on macOS

Priority LOW 19

Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.

CVSS 3.1MEDIUM 4.3 Local No auth No interaction EPSS 0.00131 Published 2026-10-14 Fixed in 2.28.8, 2.30.6 +3 CWE-863
TI-2026-73870 CVE-2026-110450 · GHSA-phrv-gmvx-w547

Nix and Lix repair operation lets local users escalate privileges

Priority LOW 36

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.00155 Published 2026-10-14 Fixed in 2.28.8, 2.30.6 +3 CWE-696
TI-2026-73869 CVE-2026-110449 · GHSA-5jjg-xg55-6mw3

Integer overflow in Nix and Lix list allocation enables out-of-bounds write

Priority LOW 32

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00249 Published 2026-10-14 Fixed in 2.28.8, 2.30.6 +3 CWE-190