CVE-2026-110450

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-14: 110-14
Full discourse1 post
  • Upwind Security MDR@UpwindMDR

    🚨HIGH - Nix/Lix Store Repair TOCTOU Privilege Escalation (CVE-2026-110450) In Nix/Lix repair operations, a TOCTOU gap lets an attacker delete a store path and swap in a malicious replacement before verification completes, causing trusted content to be accepted and enabling local privilege escalation. Systems not using the repair feature aren’t exposed. 👉Affected: Nix < 2.35.3, Lix < 2.95.4 | Upgrade to Nix 2.35.3 / Lix 2.95.4

    0000036
    319 followersView on X

Explore more