Skip to content
OpenAdvisories

Vendor

NixOS

33 known vulnerabilities.

Products

Nix 20 nixpkgs 6 hydra 5 calamares-nixos-extensions 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.0
    CVE-2026-39860

    Nix sandbox escape: file write via symlink at FOD `.tmp` copy destination

    Nix is a package manager for Linux and other Unix systems. A bug in the fix for CVE-2024-27297 allowed for arbitrary overwrites of files writable by the Nix process orchestrating the builds (typically the Nix daemon running as root in multi-user installations…

    NixOS Nix nix nix Debian Ubuntu
  • Critical 9.1
    CVE-2026-25137 EPSS 10%

    NixOs Odoo database and filestore publicly accessible with default odoo configuration

    The NixOs Odoo package is an open source ERP and CRM system. From 21.11 to before 25.11 and 26.05, every NixOS based Odoo setup publicly exposes the database manager without any authentication. This allows unauthorized actors to delete and download the entire…

    NixOS nixpkgs
  • Critical 9.1
    CVE-2024-45593

    Nix affected by unsafe NAR unpacking

    Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, causes Nix to write to arbitrary file system locations to which the Nix process has …

    NixOS Nix nix Ubuntu