← Thursday, October 15, 2026SecurityVulnerability

Nix and Lix daemons expose systems building untrusted derivations to root escalation

lwn.net by jzb Editor score 7/10

The disclosed flaws can escalate privileges to root on systems running Nix or Lix daemons, and affect systems that build untrusted derivations; fixes are available. This matters to infrastructure teams using these tools for builds and isolation.

What

Lix and Nix disclosed local root-privilege-escalation vulnerabilities affecting systems running their daemons.

How

All systems that build untrusted derivations are affected, and both projects have released fixes.

Why it matters

Engineers operating build infrastructure need to treat untrusted derivations as a security boundary and apply the available fixes.

Read on lwn.net →

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.