CVE-2026-110450

Deferred Deferred - Pending Action

Privilege Escalation in Nix and Lix via Repair Operation

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: MITRE

Description

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110450

EUVD

EUVD-2026-100806

Affected Vendors & Products

Vendor	Product	Version / Range
NixOS	Nix	0
NixOS	Nix	2.29.0
NixOS	Nix	2.31.0
NixOS	Nix	2.32.0
NixOS	Nix	2.35.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-696	The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways that may produce resultant weaknesses.

Attack-Flow Graph

Executive Summary

This vulnerability allows privilege escalation in Nix and Lix software versions before 2.35.3 and 2.95.4 respectively. It occurs during repair operations where a store path could be destroyed and replaced before content verification, enabling unauthorized access or control.

Detection Guidance

To detect this vulnerability, check the installed version of Nix or Lix on your system. Compare it against patched versions (Nix 2.35.3+, Lix 2.95.4+). Run 'nix --version' or 'lix --version' to verify. If using an unpatched version, the system may be vulnerable to privilege escalation via repair operations or other listed issues.

Impact Analysis

An attacker could exploit this to gain elevated privileges on your system, potentially allowing them to read sensitive data, modify system files, or install malicious software. Systems building untrusted derivations are particularly at risk.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance penalties if exploited due to inadequate system protections.

Mitigation Strategies

Upgrade Nix to version 2.35.3 or later and Lix to version 2.95.4 or later. Use the provided upgrade scripts or commands from the advisory to ensure proper installation. Check for bad store ownership issues in fresh installations and verify the integrity of store paths after upgrades.

Hi! I’m here to help you understand CVE-2026-110450. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70