User Privilege Escalation in Nix Multi-User Installer by NixOS
CVE-2026-110452

4MEDIUM

Key Information:

Vendor

Nixos

Status
Nix
Vendor
CVE Published:
14 October 2026

What is CVE-2026-110452?

The multi-user installer in Nix versions prior to 2.35.3 improperly sets the ownership of store contents to the user initiating the installation instead of assigning it to the root user. This misconfiguration can potentially allow users to gain unauthorized access to sensitive data and execute arbitrary code with elevated privileges, posing serious security risks to systems using the affected versions.

Affected Version(s)

Nix 0 < 2.28.8

Nix 2.29.0 < 2.30.6

Nix 2.31.0 < 2.31.6

References

https://discourse.nixos.org/t/security-advisory-for-nix-a...

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.