DailyCVE@dailycve
🔴 NixOS, Symlink Following Privilege Escalation, #CVE-2024-27297 (Critical) -DC-Oct2026-3022 https://dailycve.com/nixos-symlink-following-privilege-escalation-cve-2024-27297-critical-dc-oct2026-3022/
0000031
239 followersView on X
CVE-2024-27297Disclosure(nixos / nix)
LOWCVSS 5.9 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another program running on the host (or another fixed-output derivation) via Unix domain sockets in the abstract namespace. This allows to modify the output of the derivation, after Nix has registered the path as "valid" and immutable in the Nix database. In particular, this allows the output of fixed-output derivations to be modified from their expected content. This issue has been addressed in versions 2.3.18 2.18.2 2.19.4 and 2.20.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
0.0/ 10 priority
Sources & remediation
Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-367
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- nix
Threat summary
- 3 mentions across 2 observed days
- Momentum state: stable
What's happening
- Technical details provided in 2 signals
- Disclosure: 1 classified signal
- General: 1 classified signal
- Peaked 1d ago at 2 mentions (2026-04-08); latest day: 1
- 3 total mentions across 2 days
Affected systems
Vendors
Products
nix
Deep dive
Activity timeline3 mentions / 2d
Signal classification2 categories
Disclosure150.0%
General150.0%
Referenced assets3 URLs
Full discourse3 posts
Infoflowcloud@infoflowcloudGeneral🚨*CVE* CVE-2026-39860 Nix is a package manager for Linux and other Unix systems. A bug in the fix for CVE-2024-27297 allowed for arbitrary overwrites of files writable by the Nix process o… https://www.cve.org/CVERecord?id=CVE-2026-39860 ----- Traducción: CVE-2026-39860 Nix… http://infoflow.cloud`
Post summary
The post references CVE‑2026‑39860 affecting Nix, noting it enables arbitrary file overwrite, but provides no PoC, exploit, patch, or active exploitation details.
000007267 followersView on X
CVE@CVEnewDisclosureCVE-2026-39860 Nix is a package manager for Linux and other Unix systems. A bug in the fix for CVE-2024-27297 allowed for arbitrary overwrites of files writable by the Nix process o… https://www.cve.org/CVERecord?id=CVE-2026-39860
Post summary
CVE‑2026‑39860 is a bug in Nix's patch for CVE‑2024‑27297 that allows arbitrary file overwrites; no PoC, exploit code, or active exploitation is reported.
0000018857.0K followersView on X
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nixos | nix | - | - | - |