https://seclists.org/oss-sec/2026/q2/400: Local privilege escalation in Lix and Nix
Published May 4, 2026
·Updated
Affected Software
2 affected components
Nix Nix>=2.24.4
Lix Lix>=2.93.0
Frequently Asked Questions
1
What is the severity of the vulnerability GHSA-vh5x-56v6-4368?
The vulnerability GHSA-vh5x-56v6-4368 has a high severity rating due to its potential for local privilege escalation.
2
How do I fix the vulnerability GHSA-vh5x-56v6-4368?
To fix the vulnerability GHSA-vh5x-56v6-4368, update your Nix and Lix installations to the latest stable versions that contain the security patch.
3
What types of systems are affected by GHSA-vh5x-56v6-4368?
The GHSA-vh5x-56v6-4368 vulnerability affects multi-user installations of Nix and Lix daemons.
4
Can an attacker exploit GHSA-vh5x-56v6-4368 remotely?
No, the vulnerability GHSA-vh5x-56v6-4368 requires local access for exploitation.
5
What impact does the GHSA-vh5x-56v6-4368 vulnerability have on system security?
The GHSA-vh5x-56v6-4368 vulnerability allows local attackers to gain arbitrary code execution as the daemon user, which can compromise system security.