CVE-2025-53819
Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. The fix was applied to Nix 2.30.1. No known workarounds are available.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.9
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
- EPSS probability
- 0.13%
- CWE
- CWE-271
- Published
- 2025-07-14
- Last modified
- 2026-03-13
Affected products
- NixOS nix
Weakness type
Related vulnerabilities
- CVE-2026-44477 — CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE
- CVE-2026-35535 — In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a...
- CVE-2026-25704 — Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData
- CVE-2025-23395 — Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set
- CVE-2024-35179 — Unprivileged Stalwart Mail Server user can read files as root
- CVE-2024-0985 — PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL
- CVE-2023-38496 — Apptainer's ineffective privileges drop when requesting container network
- CVE-2023-22648 — A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD...