Veille CVE

Mercredi 14 octobre 2026

5 CVE

Critique 0 Élevée 2 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « NixOS nix » ✕
  1. CVE-2026-110453 4.3 Moyenne

    NixOS Nix

    Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.

  2. CVE-2026-110452 4.0 Moyenne

    NixOS Nix

    The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership.

  3. CVE-2026-110451 4.3 Moyenne

    NixOS Nix

    Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.

  4. CVE-2026-110450 8.0 Élevée

    NixOS Nix

    Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification.

  5. CVE-2026-110449 7.5 Élevée

    NixOS Nix

    Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.