Nixos Nix vulnerabilities

• nixos nix Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by... CVE-2026-110453 4.3 MediumOctober 14, 2026
• nixos nix The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user ... CVE-2026-110452 Fix available 4.0 MediumOctober 14, 2026
• nixos nix Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an... CVE-2026-110451 4.3 MediumOctober 14, 2026
• nixos nix Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because... CVE-2026-110450 Fix available 8.0 HighOctober 14, 2026
• nixos nix Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds... CVE-2026-110449 Fix available 7.5 HighOctober 14, 2026
• nixos nix Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature CVE-2026-64846 Fix available 2.8 LowAugust 20, 2026
• nixos nixpkgs nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server` CVE-2026-61828 8.5 HighJuly 15, 2026
• nixos nix An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix... CVE-2026-44029 Fix available 5.3 MediumMay 5, 2026
• lix project lix, nixos nix +1 more An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the... CVE-2026-44028 Fix available 7.5 HighMay 5, 2026
• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• nixos nix Nix sandbox escape: file write via symlink at FOD `.tmp` copy destination CVE-2026-39860 Fix available 9.0 CriticalApril 8, 2026
• nixos nixpkgs Privilege escalation to the `CAP_NET_RAW` capability via the `programs.captive-browser` NixOS module CVE-2026-25740 5.8 MediumFebruary 9, 2026
• nixos nixpkgs NixOs Odoo database and filestore publicly accessible with default odoo configuration CVE-2026-25137 EPSS 10.3% 9.1 CriticalFebruary 2, 2026
• nixos nixpkgs Tandoor Recipes module allows SQLite database to be externally accessible with the default settings CVE-2026-23838 8.7 HighJanuary 19, 2026
• nixos nixpkgs NixOS has hardcoded credentials in Onlyoffice module CVE-2025-64766 5.3 MediumNovember 17, 2025
• nixos nix Nix's privilege dropping to build user broke for macOS CVE-2025-53819 7.9 HighJuly 14, 2025
• nixos nix A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of... CVE-2025-52993 5.6 MediumJune 27, 2025
• nixos nix The Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build... CVE-2025-52992 3.2 LowJune 27, 2025
• nixos nix The Nix, Lix, and Guix package managers default to using temporary build directories in a world... CVE-2025-52991 3.2 LowJune 27, 2025
• nixos nix The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can... CVE-2025-46416 2.9 LowJune 27, 2025
• nixos nix A race condition in the Nix, Lix, and Guix package managers allows the removal of content from... CVE-2025-46415 3.2 LowJune 27, 2025
• nixos nixpkgs Local privilege escalation in make-initrd-ng CVE-2025-32438 8.8 HighApril 15, 2025
• samba rsync, almalinux, archlinux arch linux +24 more +26 more Rsync: --safe-links option bypass leads to path traversal CVE-2024-12088 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +32 more +34 more Rsync: path traversal vulnerability in rsync CVE-2024-12087 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +13 more +15 more Rsync: rsync server leaks arbitrary client files CVE-2024-12086 Fix available 6.1 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +44 more +46 more Rsync: info leak via uninitialized stack contents CVE-2024-12085 Public exploitFix available 7.5 HighJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +11 more +13 more Rsync: heap buffer overflow in rsync due to improper checksum length handling CVE-2024-12084 Public exploitFix available EPSS 72.5% 9.8 CriticalJanuary 9, 2025
• nixos nix Nix allows macOS sandbox escape via built-in builders CVE-2024-51481 1.0 LowOctober 31, 2024
• nixos nix Credential leak when credentials are used with `<nix/fetchurl.nix>` CVE-2024-47174 Fix available 5.9 MediumSeptember 26, 2024
• nixos nix Nix affected by unsafe NAR unpacking CVE-2024-45593 Fix available 9.1 CriticalSeptember 10, 2024
• nixos calamares-nixos-extensions calamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systems CVE-2024-43378 7.8 HighAugust 15, 2024
• nixos nix Nix sandbox escape CVE-2024-38531 Fix available 3.6 LowJune 28, 2024
• nixos nix Nix Corruption of fixed-output derivations CVE-2024-27297 Fix available 6.3 MediumMarch 11, 2024
• nixos calamares-nixos-extensions `calamares-nixos-extensions` LUKS keyfile exposure CVE-2023-36476 7.9 HighJune 29, 2023
• nixos nix Nix through 2.3 allows local users to gain access to an arbitrary user's account because the... CVE-2019-17365 7.8 HighOctober 9, 2019
• nixos NixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain... CVE-2017-7412 7.8 HighApril 4, 2017