PatchSiren cyber security CVE debrief

CVE-2026-110452 NixOS CVE debrief

CVE-2026-110452 is a medium-severity vulnerability in the Nix package manager, affecting multiple versions. The multi-user installer sets incorrect ownership of store contents, allowing local users to gain elevated privileges. This issue arises because the installer incorrectly assigns ownership to the user who invoked it, rather than root. As a result, defenders responsible for Nix installations, especially in multi-user environments, should assess exposure and verify the latest version is used to mitigate potential risks. The vulnerability's impact includes local privilege escalation, with multi-user environments being at higher risk. Verification of Nix versions and careful of

Vendor: NixOS
Product: Nix
CVSS: MEDIUM 4
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-10-14
Original CVE updated: 2026-10-14
Advisory published: 2026-10-14
Advisory updated: 2026-10-14

Who should care

Defenders responsible for Nix installations, especially in multi-user environments, should assess exposure and verify the latest version is used.

Why it matters

CVE-2026-110452 is a medium-severity vulnerability in Nix that allows local users to gain elevated privileges. Defenders should prioritize verifying Nix installations, especially in multi-user environments, and ensure the latest version is used.

Local privilege escalation is possible due to incorrect ownership
Multi-user environments are at higher risk
Verification of Nix versions and installations is necessary

Technical summary

The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer, rather than root. This vulnerability allows local users to gain elevated privileges. The issue is particularly concerning in multi-user environments where incorrect ownership can lead to unauthorized access and potential system compromise. Defenders should prioritize verifying Nix installations, especially in multi-user environments, and ensure the latest version is used to prevent exploitation.

Defensive priority

Defenders should prioritize verifying Nix installations, especially in multi-user environments, and ensure the latest version is used.

Recommended defensive actions

Verify Nix installations and ensure the latest version is used
Review multi-user environments for potential exposure
Monitor for local privilege escalation attempts

Evidence notes

The CVE record and source item provide details on the vulnerability, including its description, affected versions, and references to additional information.

Sources and references

Verified primary and authoritative sources

CVE-2026-110452 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-110452

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-110452 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-110452

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

CVE-2026-110452
Unverified legacy reference

URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110452.json

cve_program_cvelist_v5
Source reference
Unverified legacy reference

URL: https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547

Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.