
Upwind Security MDR@UpwindMDR
🚨HIGH - Nix/Lix Store Repair TOCTOU Privilege Escalation (CVE-2026-110450) In Nix/Lix repair operations, a TOCTOU gap lets an attacker delete a store path and swap in a malicious replacement before verification completes, causing trusted content to be accepted and enabling local privilege escalation. Systems not using the repair feature aren’t exposed. 👉Affected: Nix < 2.35.3, Lix < 2.95.4 | Upgrade to Nix 2.35.3 / Lix 2.95.4
0000036
319 followersView on X
