Skip to content
OpenAdvisories

Product · NixOS

Nix

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.0
    CVE-2026-110450

    Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and …

    NixOS Nix nix nix Debian Ubuntu
  • High 7.5
    CVE-2026-110449

    Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untr…

    NixOS Nix nix nix Debian Ubuntu
  • High 7.5
    CVE-2026-44028

    An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix Archive) parser…

    NixOS Lix Project Nix Lix Debian Ubuntu
  • High 7.9
    CVE-2025-53819

    Nix's privilege dropping to build user broke for macOS

    Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. The fix was applied to Nix 2.30.1. No known workarounds are available.

    NixOS Nix