These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-110453 is a vulnerability in Nix before 2.35.3 that allows unauthorized connections made by build users from daemon clients when unsandboxed on macOS or FreeBSD. This medium-severity issue may lead to potential unauthorized connections, increased risk of lateral movement, and elevated privileges in certain scenarios. Defenders responsible for Nix deployments on these platforms should assess expos [truncated]
CVE-2026-110452 is a medium-severity vulnerability in the Nix package manager, affecting multiple versions. The multi-user installer sets incorrect ownership of store contents, allowing local users to gain elevated privileges. This issue arises because the installer incorrectly assigns ownership to the user who invoked it, rather than root. As a result, defenders responsible for Nix installations, especia [truncated]
CVE-2026-110451 is a medium-severity vulnerability affecting Nix before 2.35.3 and Lix before 2.95.4 on macOS, allowing a Seatbelt sandbox escape for an unconfined build due to mishandling of a certain size threshold. This vulnerability has the potential to impact organizations that use Nix and Lix on macOS, particularly those with unconfined builds. The vulnerability's severity and potential impact make [truncated]
CVE-2026-110450 is a high-severity vulnerability affecting Nix before 2.35.3 and Lix before 2.95.4. The vulnerability allows for privilege escalation via a repair operation, which could destroy and then replace a store path before content verification. This could lead to potential system compromise if not patched. Defenders should assess exposure and apply patches or mitigations. The CVE record and source [truncated]
CVE-2026-110449 is a high-severity vulnerability affecting Nix before 2.35.3 and Lix before 2.95.4. An integer overflow and resultant out-of-bounds write occur when evaluating untrusted expressions due to mishandled list allocation. This vulnerability can lead to potential code execution and data corruption. Defenders responsible for Nix installations, especially those evaluating untrusted expressions, sh [truncated]
A time-of-check/time-of-use race condition in Nix package manager versions prior to 2.35.0 can be exploited by a malicious derivation with the recursive-nix feature. This can potentially allow creation or truncation of empty files outside the build sandbox with the daemon user's permissions. The issue is fixed in version 2.35.0. Defenders should assess exposure and prioritize remediation for Nix deploymen [truncated]
A Nixpkgs vulnerability allows local users to log in as the root user without a password when using MySQL services with mysql or percona-server. This issue is fixed in the 25.11 and 26.05 channels. The vulnerability exists due to the insecure initialization of the MySQL database by the Nixpkgs MySQL services module. This allows unprivileged local users to gain root access without a password. Defenders sho [truncated]