CVEvulnerability

CVE-2026-110450

8.0 HIGH Published 2026-10-14 Modified 2026-10-19 Official page ↗
Status
Deferred
Published
2026-10-14
Last modified
2026-10-19
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.0 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Weaknesses
CWE-696

Description

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification.

Related

Weakness · CWE (1)

  • CWE-696 Incorrect Behavior Order weakness

References