CVE-2025-53819: Nix's privilege dropping to build user broke for macOS
Published Jul 14, 2025
·Updated
Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. The fix was applied to Nix 2.30.1. No known workarounds are available.
Affected Software
2 affected components
Nix Nix=2.30.0
Nix Nix<2.30.1
Event History
Jul 14, 2025
CVE Published
via MITRE·08:42 PM
Data Sourced
via MITRE·08:42 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-53819?
CVE-2025-53819 has a high severity due to the execution of builds with elevated root privileges.
2
How do I fix CVE-2025-53819?
To fix CVE-2025-53819, upgrade Nix to version 2.30.1 or later.
3
Who is impacted by CVE-2025-53819?
Users of Nix version 2.30.0 on macOS are impacted by CVE-2025-53819.
4
Are there any workarounds for CVE-2025-53819?
No known workarounds are available for CVE-2025-53819.
5
What is the nature of the vulnerability in CVE-2025-53819?
CVE-2025-53819 allows builds to be executed with elevated privileges instead of the intended build users.