What’s Vulnerable › Vulnerabilities

CVE-2025-53819: Nix's privilege dropping to build user broke for macOS

• Severity: high (CVSS 7.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-14 · updated 2026-06-17
• Weakness: CWE-271

Description

Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. The fix was applied to Nix 2.30.1. No known workarounds are available.

Affected products

• NixOS Nix: = 2.30.0

References

• https://github.com/NixOS/nix/commit/e2ef2cfcbc83ea01308ee64c38a58707ab23dec3
• https://github.com/NixOS/nix/pull/13281
• https://github.com/NixOS/nix/pull/13455
• https://github.com/NixOS/nix/security/advisories/GHSA-qc7j-jgf3-qmhg

Get alerted when CVE-2025-53819 or the next vulnerability affects your stack