CVE-2026-39860
Description
A flaw was found in Nix. This vulnerability allows local users, who can submit builds to the Nix daemon, to create a symbolic link (symlink) during the output registration process of fixed-output derivations. The Nix process, running with elevated privileges, would then follow this symlink, leading to an arbitrary file overwrite. This could enable an attacker to modify sensitive system files and gain root privileges.
Statement
Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.
Understanding the Weakness (CWE)
Confidentiality,Integrity
Technical Impact: Read Files or Directories; Modify Files or Directories
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
