CVE-2025-53819 | THREATINT

Description

Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. The fix was applied to Nix 2.30.1. No known workarounds are available.

Reserved 2025-07-09 | Published 2025-07-14 | Updated 2025-07-14 | Assigner GitHub_M

HIGH: 7.9CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

Problem types

CWE-271: Privilege Dropping / Lowering Errors

Product status

= 2.30.0

affected

References

github.com/NixOS/nix/security/advisories/GHSA-qc7j-jgf3-qmhg

github.com/NixOS/nix/pull/13281

github.com/NixOS/nix/pull/13455

github.com/...ommit/e2ef2cfcbc83ea01308ee64c38a58707ab23dec3

cve.org (CVE-2025-53819)

nvd.nist.gov (CVE-2025-53819)

Download JSON