4.3Medium

CVE-2026-110451

NixOS Nix Published: (1 month ago)

Description

Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.

Weakness (CWE): CWE-863

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
NixOS Nix < 2.28.8, 2.29.0 – < 2.30.6, 2.31.0 – < 2.31.6, 2.32.0 – < 2.34.9, 2.35.0 – < 2.35.3

References and patches