7.9High

CVE-2025-53819Nix's privilege dropping to build user broke for macOS

NixOS nix Published: (1 year ago)

Description

Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. The fix was applied to Nix 2.30.1. No known workarounds are available.

Weakness (CWE): CWE-271

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
NixOS nix = 2.30.0

References and patches