What’s Vulnerable › Products

NixOS Nix vulnerabilities

21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your NixOS Nix version is affected

Latest NixOS Nix vulnerabilities

• CVE-2026-110453 — (CVSS 4.3)
• CVE-2026-110452 — (CVSS 4.0)
• CVE-2026-110451 — (CVSS 4.3)
• CVE-2026-110450 — (CVSS 8.0)
• CVE-2026-110449 — (CVSS 7.5)
• CVE-2026-64846 — Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature (CVSS 2.8)
• CVE-2026-44029 — (CVSS 5.3)
• CVE-2026-44028 — (CVSS 7.5)
• CVE-2026-39860 — Nix sandbox escape: file write via symlink at FOD `.tmp` copy destination (CVSS 8.4)
• CVE-2025-53819 — Nix's privilege dropping to build user broke for macOS (CVSS 7.9)
• CVE-2025-52993 — (CVSS 5.6)
• CVE-2025-52992 — (CVSS 3.2)
• CVE-2025-52991 — (CVSS 3.2)
• CVE-2025-46416 — (CVSS 2.9)
• CVE-2025-46415 — (CVSS 3.2)
• CVE-2024-51481 — Nix allows macOS sandbox escape via built-in builders (CVSS 1.0)
• CVE-2024-47174 — Credential leak when credentials are used with `<nix/fetchurl.nix>` (CVSS 5.9)
• CVE-2024-45593 — Nix affected by unsafe NAR unpacking (CVSS 8.8)
• CVE-2024-38531 — Nix sandbox escape (CVSS 3.6)
• CVE-2024-27297 — Nix Corruption of fixed-output derivations (CVSS 5.9)
• CVE-2019-17365 — (CVSS 7.8)