CVE-2026-110452 | NixOS Nix up to 2.35.2 Multi-User Installer privileges management

October 14, 2026 Yanac

A vulnerability described as problematic has been identified in NixOS Nix up to 2.28.7/2.30.5/2.31.5/2.34.8/2.35.2. Affected by this issue is some unknown functionality of the component Multi-User Installer. The manipulation results in improper privilege management.

This vulnerability is identified as CVE-2026-110452. The attack is only possible with local access. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More