8 matches found
CVE-2026-110452
The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...
CVE-2026-110452
The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...
CVE-2026-110452
A flaw was found in nix. The multi-user installer incorrectly assigns ownership of Nix store contents to the user who ran the installation rather than to root. A local user who executed the installer can modify files within the Nix store, leading to unauthorized modification of installed software...
CVE-2026-110452
The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...
CVE-2026-110452
The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...
CVE-2026-110452
The multi-user installer in Nix before version 2.35.3 is vulnerable to an incorrect ownership assignment (CWE-708). The installer incorrectly sets the ownership of store contents to the user who invokes it, rather than maintaining the required root ownership . This issue allows for unauthorized m...
