Privilege Escalation in Nix, Lix, and Guix Package Managers

CVE-2025-46416

What is CVE-2025-46416?

The Nix, Lix, and Guix package managers exhibit a critical flaw that permits users to bypass build isolation mechanisms. This vulnerability allows unauthorized privilege escalation, enabling users to access the build user account, which could lead to potential exploitation. The affected versions span multiple releases across all three package managers, potentially allowing malicious actors to compromise the build environment.

News Articles

NixOS Discourse

CVE-2025-46416CVE-2025-46415

Security Advisory: Privilege Escalations in Nix, Lix and Guix - Announcements / Security - NixOS Discourse

Summary This advisory follows up on the pre-announcement made last week. Nix and Lix are affected by a set of issues that can be combined to achieve root privilege escalation. These issues are identified as: CVE-2025-…

References