CVE-2025-53819CWE-271

Nix's privilege dropping to build user broke for macOS

High · published July 14, 2025

CVSS v3.1
7.9
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. The fix was applied to Nix 2.30.1. No known workarounds are available.

The record
Technical detail
CVSS v3.1
7.9 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-271 · Privilege Dropping / Lowering Errors
Published
2025-07-14T20:42Z
EPSS history
Timeline
  • 14 JUL 20:42Z
    Nix's privilege dropping to build user broke for macOS
    cvelistv5