CVE-2026-110452: Medium severity Nix Nix vulnerability
The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Nixto a version that resolves this vulnerability.Fixed in 2.35.3
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems where the Nix multi-user installer was used with a version before 2.35.3 are affected. The issue concerns ownership of Nix store contents created by that installer.
What access does an attacker need to exploit this?
The provided vector indicates local access is required, with no privileges or user interaction required. The installer-invoking user receives ownership of store contents that should be owned by root.
What is the impact?
The issue can affect integrity because store contents are owned by the installer-invoking user rather than root. No confidentiality or availability impact is indicated by the supplied vector.
What should be remediated?
Update Nix to version 2.35.3 or later. Systems installed using the affected multi-user installer should also verify that Nix store contents have the expected root ownership.