CVE-2026-110453

Deferred Deferred - Pending Action

Unsandboxed Nix Daemon Client Connection on macOS or FreeBSD

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: MITRE

Description

Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110453

EUVD

EUVD-2026-100809

Affected Vendors & Products

Vendor	Product	Version / Range
NixOS	Nix	0
NixOS	Nix	2.29.0
NixOS	Nix	2.31.0
NixOS	Nix	2.32.0
NixOS	Nix	2.35.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability in Nix before version 2.35.3 allows build users on macOS or FreeBSD systems to make unauthorized connections via daemon clients when the system is unsandboxed. This could lead to unintended network activity or potential data exposure.

Detection Guidance

Check Nix version with 'nix --version' and compare against patched versions (2.35.3, 2.34.9, etc.). Inspect Nix daemon logs for unauthorized connections on macOS/FreeBSD. Review store paths for unexpected modifications or ownership changes.

Impact Analysis

If you use Nix on macOS or FreeBSD without sandboxing, an attacker could exploit this to make connections from your build users through the daemon, potentially leading to data leaks or unauthorized network access.

Compliance Impact

The vulnerability primarily involves unauthorized privilege escalation and sandbox escape on macOS and FreeBSD systems, which could lead to unauthorized access to sensitive data. This may impact compliance with GDPR (data protection) and HIPAA (health data security) by potentially exposing personal or health information to unauthorized parties. Systems processing such data must ensure secure configurations to mitigate risks.

Mitigation Strategies

Upgrade Nix to version 2.35.3 or later to address the issue. Ensure the Nix daemon runs in a sandboxed environment on macOS or FreeBSD to prevent unauthorized connections from build users.

Hi! I’m here to help you understand CVE-2026-110453. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70