Arbitrary Command Execution in NixOS Captive Browser

CVE-2026-25740

What is CVE-2026-25740?

A flexibility issue in the NixOS captive browser allows users to execute arbitrary commands when the program is enabled. This vulnerability stems from the CAP_NET_RAW capability, which can be exploited by any user on the system. This can lead to serious consequences, such as binding to privileged ports and spoofing localhost traffic from privileged services, potentially compromising system security. The issue has been addressed in versions 25.11 and 26.05, providing necessary updates for safeguarding against such risks.

References