<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: nix</title><description>Every new CVE for nix.</description><link>https://agentprime.io/</link><item><title>CVE-2026-110453: Incorrect authorization in Nix</title><link>https://agentprime.io/advisories/CVE-2026-110453/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110453/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 04:15:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110452: Nix: The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the…</title><link>https://agentprime.io/advisories/CVE-2026-110452/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110452/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 04:12:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110451: Incorrect authorization in Nix</title><link>https://agentprime.io/advisories/CVE-2026-110451/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110451/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 04:08:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110450: Nix: Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation…</title><link>https://agentprime.io/advisories/CVE-2026-110450/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110450/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 04:03:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110449: Integer overflow in Nix</title><link>https://agentprime.io/advisories/CVE-2026-110449/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110449/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 03:59:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-64846: Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature</title><link>https://agentprime.io/advisories/CVE-2026-64846/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-64846/</guid><description>CVSS 2.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 16:18:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44029: Path traversal in Nix</title><link>https://agentprime.io/advisories/CVE-2026-44029/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44029/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 05 May 2026 00:51:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44028: Uncontrolled recursion in Nix and others</title><link>https://agentprime.io/advisories/CVE-2026-44028/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44028/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 05 May 2026 00:30:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-39860: Nix sandbox escape: file write via symlink at FOD `.tmp` copy destination</title><link>https://agentprime.io/advisories/CVE-2026-39860/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-39860/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Apr 2026 20:58:22 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-53819: Nix&apos;s privilege dropping to build user broke for macOS</title><link>https://agentprime.io/advisories/CVE-2025-53819/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53819/</guid><description>CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Jul 2025 20:42:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-52993: Race condition in Nix</title><link>https://agentprime.io/advisories/CVE-2025-52993/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-52993/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Jun 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-52992: Incorrect permission assignment in Nix</title><link>https://agentprime.io/advisories/CVE-2025-52992/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-52992/</guid><description>CVSS 3.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Jun 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-52991: Incorrect default permissions in Nix</title><link>https://agentprime.io/advisories/CVE-2025-52991/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-52991/</guid><description>CVSS 3.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Jun 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-46416: Nix: The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user…</title><link>https://agentprime.io/advisories/CVE-2025-46416/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-46416/</guid><description>CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Jun 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-46415: Time-of-check time-of-use race condition in Nix</title><link>https://agentprime.io/advisories/CVE-2025-46415/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-46415/</guid><description>CVSS 3.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Jun 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-51481: Nix allows macOS sandbox escape via built-in builders</title><link>https://agentprime.io/advisories/CVE-2024-51481/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-51481/</guid><description>CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 31 Oct 2024 16:10:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-47174: Credential leak when credentials are used with `&lt;nix/fetchurl.nix&gt;`</title><link>https://agentprime.io/advisories/CVE-2024-47174/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-47174/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Sep 2024 17:27:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-45593: Nix affected by unsafe NAR unpacking</title><link>https://agentprime.io/advisories/CVE-2024-45593/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45593/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Sep 2024 15:51:07 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-38531: Nix sandbox escape</title><link>https://agentprime.io/advisories/CVE-2024-38531/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-38531/</guid><description>CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Jun 2024 13:18:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-27297: Nix Corruption of fixed-output derivations</title><link>https://agentprime.io/advisories/CVE-2024-27297/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-27297/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Mar 2024 21:24:43 GMT</pubDate><category>CVE</category></item></channel></rss>