CVE-2026-110453
CVE-2026-110453
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.
CVSS 4.3 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
nix
- Versions
- ≥ 0, < 2.28.8: Affected (semver)
- ≥ 2.29.0, < 2.30.6: Affected (semver)
- ≥ 2.31.0, < 2.31.6: Affected (semver)
- ≥ 2.32.0, < 2.34.9: Affected (semver)
- ≥ 2.35.0, < 2.35.3: Affected (semver)
Update to 2.28.8; Update to 2.30.6; Update to 2.31.6; Update to 2.34.9; Update to 2.35.3