CVE-2026-110450: High severity NixOS Nix vulnerability
Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using Nix versions before 2.35.3 or Lix versions before 2.95.4 are affected. The issue is locally exploitable, so exposure depends on an attacker being able to run the relevant repair operation on the system.
What access does an attacker need?
The vector is local and requires no privileges or user interaction according to the supplied severity metrics. Exploitation involves a repair operation that destroys and replaces a store path before its content is verified.
What is the impact of successful exploitation?
Successful exploitation can result in privilege escalation. The supplied metrics indicate high confidentiality and integrity impact, with low availability impact.
What versions address the issue?
Update Nix to version 2.35.3 or later, or Lix to version 2.95.4 or later.