← CVE Intelligence

CVE-2026-110453

NixOS / Nix PUBLISHED

Description (CNA)

Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.

Affected (CNA)

Vendor / productVersions
NixOS / Nixaffected 0 before 2.28.8; affected 2.29.0 before 2.30.6; affected 2.31.0 before 2.31.6; affected 2.32.0 before 2.34.9; affected 2.35.0 before 2.35.3

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.