Directory Traversal Vulnerability in Nix by NixOS
CVE-2026-44029

5.3MEDIUM

Key Information:

Vendor

Nixos

Status
Nix
Vendor
CVE Published:
5 May 2026

What is CVE-2026-44029?

A directory traversal vulnerability was identified in Nix prior to version 2.34.7. This issue allows attackers to write to arbitrary files through malicious use of the 'nix-prefetch-url --unpack' or 'nix store prefetch-file --unpack' commands, potentially compromising the integrity of the system. Mitigation is achieved by upgrading to the specified fixed versions, ensuring enhanced security and preventing unauthorized file access.

Affected Version(s)

Nix 2.24.7 < 2.28.7

Nix 2.29.0 < 2.29.4

Nix 2.30.0 < 2.30.5

References

https://discourse.nixos.org/t/security-advisory-local-pri...
https://www.openwall.com/lists/oss-security/2026/05/04/33
https://github.com/NixOS/nix/security/advisories/GHSA-gr9...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.