CVE-2025-52991: Low severity debian/guix vulnerability
The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data manipulation. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52991?
CVE-2025-52991 is considered a high severity vulnerability due to the potential for unauthorized actions and data manipulation by standard users.
How do I fix CVE-2025-52991?
To fix CVE-2025-52991, configure the package managers to use secure, non-world-readable and non-world-writable temporary build directories.
Which package managers are affected by CVE-2025-52991?
CVE-2025-52991 affects the Nix, Lix, and Guix package managers.
What are the potential risks associated with CVE-2025-52991?
The risks of CVE-2025-52991 include privilege escalation and the possibility of users manipulating or accessing unauthorized data.
Are there any known exploits for CVE-2025-52991?
As of now, there are no public exploits reported for CVE-2025-52991, but the exploitability is high given the nature of the vulnerability.