CVE-2025-46415: Race Condition
A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46415?
CVE-2025-46415 is considered a significant vulnerability due to its potential for privilege escalation and unauthorized content removal.
How do I fix CVE-2025-46415?
To mitigate CVE-2025-46415, upgrade Nix to versions 2.24.15, 2.26.4, 2.28.4, or 2.29.1; Lix to versions 2.91.2, 2.92.2, or 2.93.1; and Guix to version 1.4.0-38.0e79d5b or later.
Which software is affected by CVE-2025-46415?
CVE-2025-46415 affects Nix versions prior to 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix versions before 2.91.2, 2.92.2, and 2.93.1; and Guix versions earlier than 1.4.0-38.0e79d5b.
What kind of threat does CVE-2025-46415 pose?
CVE-2025-46415 poses a threat of unauthorized access and content removal from arbitrary folders, potentially leading to privilege escalation.
Are there any known exploits for CVE-2025-46415?
While specific exploits for CVE-2025-46415 are not detailed, the nature of the vulnerability suggests that it could be exploited to manipulate or delete critical content.