Skip to content
OpenAdvisories

Product · wavelens

gradient

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-44592

    Gradient: Unauthenticated worker on /proto → arbitrary NAR write / cache poisoning

    Gradient is a nix-based continuous integration system. In 1.1.0, when GRADIENT_DISCOVERABLE=true (the default, and the NixOS module default), anyone who can reach /proto can register as a worker without any credentials by sending a fresh, never-registered wor…

    wavelens gradient