NixOS Nix up to 2.24.14/2.26.3/2.28.3/2.29.0 race condition

Summaryinfo

A vulnerability categorized as problematic has been discovered in NixOS Nix up to 2.24.14/2.26.3/2.28.3/2.29.0. This affects an unknown function. Such manipulation leads to race condition. This vulnerability is listed as CVE-2025-52993. The attack must be carried out locally. There is no available exploit. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in NixOS Nix up to 2.24.14/2.26.3/2.28.3/2.29.0 and classified as problematic. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a race condition vulnerability. Using CWE to declare the problem leads to CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. Impacted is confidentiality, integrity, and availability. CVE summarizes:

A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user (e.g., nixbld* or guixbuild*). This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.

The advisory is shared for download at discourse.nixos.org. This vulnerability is handled as CVE-2025-52993 since 06/23/2025. The exploitation is known to be difficult. The attack needs to be approached locally. There are neither technical details nor an exploit publicly available.

Upgrading to version 2.24.15, 2.26.4, 2.28.4 or 2.29.1 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• NixOS

Name

• Nix

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.9
• 2.10
• 2.11
• 2.12
• 2.13
• 2.14
• 2.15
• 2.16
• 2.17
• 2.18
• 2.19
• 2.20
• 2.21
• 2.22
• 2.23
• 2.24
• 2.24.0
• 2.24.1
• 2.24.2
• 2.24.3
• 2.24.4
• 2.24.5
• 2.24.6
• 2.24.7
• 2.24.8
• 2.24.9
• 2.24.10
• 2.24.11
• 2.24.12
• 2.24.13
• 2.24.14
• 2.25
• 2.26
• 2.26.0
• 2.26.1
• 2.26.2
• 2.26.3
• 2.27
• 2.28
• 2.28.0
• 2.28.1
• 2.28.2
• 2.28.3
• 2.29.0

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion