CVE-2025-53819highCWE-271

CVE-2025-53819: high-severity vulnerability in NixOS nix

Nix's privilege dropping to build user broke for macOS

Published · Updated

Follow this CVE+ Monitor Nix

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.9epss 0.1%
Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. The fix was applied to Nix 2.30.1. No known workarounds are available.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
Affected products
NixOS · nix
Related CVEs — NixOS nix

In the same product, most dangerous first.

CVE-2024-45593CRITICALNix affected by unsafe NAR unpackingEPSS 0.6%CVE-2024-27297MEDIUMNix Corruption of fixed-output derivationsEPSS 0.6%CVE-2024-47174MEDIUMCredential leak when credentials are used with `<nix/fetchurl.nix>`EPSS 0.3%CVE-2026-39860CRITICALNix sandbox escape: file write via symlink at FOD `.tmp` copy destinationEPSS 0.2%CVE-2024-51481LOWNix allows macOS sandbox escape via built-in buildersEPSS 0.2%CVE-2024-38531LOWNix sandbox escapeEPSS 0.1%