CVEvulnerability

CVE-2025-53819

7.9 HIGH Published 2025-07-14 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2025-07-14
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.9 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
Weaknesses: CWE-271

Description

Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. The fix was applied to Nix 2.30.1. No known workarounds are available.

Weakness · CWE (1)

CWE-271 Privilege Dropping / Lowering Errors weakness

References

https://github.com/NixOS/nix/commit/e2ef2cfcbc83ea01308ee64c38a58707ab23dec3 github.com
https://github.com/NixOS/nix/pull/13281 github.com
https://github.com/NixOS/nix/pull/13455 github.com
https://github.com/NixOS/nix/security/advisories/GHSA-qc7j-jgf3-qmhg github.com

CVE-2025-53819

Description

Related

Weakness · CWE (1)

References