Vulnerabilities in NixOS

27 results
Vexday analysis

NixOS apresenta 27 vulnerabilidades catalogadas, com 3 classificadas como críticas, embora nenhuma esteja sob ataque ativo documentado. A fraqueza dominante é falha de autenticação (CWE-306), e o risco recente é moderado com 3 divulgações nos últimos 90 dias, indicando exposição controlada mas presente.

CVE-2025-52992LOWThe Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build fails. This may allow arbitrary processes tEPSS 0.1%CVE-2024-38531LOWNix sandbox escapeEPSS 0.1%CVE-2024-43378HIGHcalamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systemsEPSS 0.1%CVE-2025-53819HIGHNix's privilege dropping to build user broke for macOSEPSS 0.1%CVE-2025-46415LOWA race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.EPSS 0.1%CVE-2025-52993MEDIUMA race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the builEPSS 0.1%CVE-2026-61828HIGHnixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`EPSS 0.1%