CVE-2026-110453

No fix known EPSS <1%CVSS 4.3

Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.

Published 2026-10-14 · CVE record · OSV

Products: NixOS nix