7.9Yüksek

CVE-2025-53819Nix's privilege dropping to build user broke for macOS

NixOS nix Yayım: (1 yıl önce)

Açıklama

Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. The fix was applied to Nix 2.30.1. No known workarounds are available.

Zayıflık türü (CWE): CWE-271

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
NixOS nix = 2.30.0

Kaynaklar ve yamalar