CVE-2026-110453 in Nix

Resumen

por MITRE • 2026-10-14

Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: MITRE
• Reservar: 2026-10-14
• Divulgación: 2026-10-14
• Moderación: aceptado
• Artículo: VDB-419043
• CPE: 20261014
• CWE: CWE-265 (confirmado)
• CVSS: 4.3 (CNA)
• EPSS: 0.00000
• KEV: no
• Actividades: bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-110453
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-110453
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-110453/