Skip to content
OpenAdvisories

Package · Ubuntu

nix

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2026-39860

    Nix sandbox escape: file write via symlink at FOD `.tmp` copy destination

    Nix is a package manager for Linux and other Unix systems. A bug in the fix for CVE-2024-27297 allowed for arbitrary overwrites of files writable by the Nix process orchestrating the builds (typically the Nix daemon running as root in multi-user installations…

    NixOS Nix nix nix Debian Ubuntu
  • Critical 9.1
    CVE-2024-45593

    Nix affected by unsafe NAR unpacking

    Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to arbitrary file system locations to which the Nix process has …

    NixOS Nix nix Ubuntu