MajorCritical vulnerability

CVE-2026-110450 (CVSS 8.0)

NVD · officialPublished Oct 14, 2026Risk 37/100

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification.

Technical details

CVSS

8.0

AV:LocalAC:LowPR:NoneUI:NoneC:HighI:HighA:Low

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source