[ Vendor · 5 CVEs ]
NixOS
CVEs affecting NixOS published in the last 30 days, plus any NixOS CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110451 | 14 Oct 2026 | CVSS 4.3 | NixOS NixNix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is… | |
| CVE-2026-110452 | 14 Oct 2026 | CVSS 4.0 | NixOS NixThe multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be… | |
| CVE-2026-110453 | 14 Oct 2026 | CVSS 4.3 | NixOS NixNix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients. | |
| CVE-2026-110450 | 14 Oct 2026 | CVSS 8.0 | NixOS NixNix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path… | |
| CVE-2026-110449 | 14 Oct 2026 | CVSS 7.5 | NixOS NixNix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list… |