CVE-2025-53819
BaseFortify
Publication date: 2025-07-14
Last updated on: 2025-07-15
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nixos | nix | 2.30.0 |
| nixos | nix | 2.30.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-271 | The product does not drop privileges before passing control of a resource to an actor that does not have those privileges. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Nix 2.30.0 on macOS causes builds to be executed with elevated privileges (root) instead of the intended build users, potentially allowing unauthorized privilege escalation. It was fixed in Nix 2.30.1.
What immediate steps should I take to mitigate this vulnerability?
Upgrade Nix to version 2.30.1 or later, as this version contains the fix for the vulnerability. No known workarounds are available.
How can this vulnerability impact me? :
The vulnerability can lead to privilege escalation where build processes run as root instead of a less privileged user, increasing the risk of unauthorized system modifications, data corruption, or compromise of system integrity.