Skip to content
Today
Sections

Build Independently confirmed2 publishers 2 min read Published

Nix and Lix patch a chain of daemon flaws that ends in local root

Nix and Lix jointly disclosed daemon flaws on October 13 that chain into local root, and each project shipped a fixed release that day. Multi-user installs where untrusted users can reach the daemon should upgrade now, Tech AI Wire reports.

The Engineer · Build desk

Send a correction

Illustration accompanying Nix and Lix patch a chain of daemon flaws that ends in local root
Generated illustration
Overflow bug reached Lix 76 days before disclosure Dates in the Lix team's write-up for each report and fix, then the joint disclosure. The 76-day count assumes all dates fall in 2026.

Timeline: the overflow bug was reported to the Lix team on July 29 and Lix fixes were ready on August 29. The macOS privilege escalation chain arrived on September 12 and the sandbox escape on October 9. Nix and Lix jointly disclosed the flaws on October 13, 2026.

  1. 2026Overflow bug reported to the Lix team, claim 21
  2. 2026Lix fixes ready for the overflow bug, claim 22
  3. 2026macOS privilege escalation chain arrives, claim 16
  4. 2026Sandbox escape arrives, claim 16
  5. 2026Nix and Lix jointly disclose the flaws, claim 1
Overflow bug reached Lix 76 days before disclosure
DateEventClaim
July 29, 2026Overflow bug reported to the Lix team21
August 29, 2026Lix fixes ready for the overflow bug22
September 12, 2026macOS privilege escalation chain arrives16
October 9, 2026Sandbox escape arrives16
October 13, 2026Nix and Lix jointly disclose the flaws1

What happened

  • In the main bug, tracked as GHSA-jwvx-xq5j-gc56, the Nix daemon unpacked an uploaded archive straight into its final store path and checked the hash only afterward.
  • Vulnerable versions also let untrusted users request a repair that replaces an existing store path, and a failed hash check left the malicious files on disk.
  • Unsupported Nix branches 2.29, 2.32 and 2.33 should be presumed vulnerable, and Lix 2.93 and older are affected but no longer maintained.

Why it matters

  • Who's exposed exposure Where the daemon runs as root, every account in allowed-users is effectively a root account until the upgrade. The stopgap offered is to trim that list to the accounts that need to build.
  • What it limits constraint NixOS users cannot take the fix from the channels yet, because the unstable and 26.05 updates are still in progress. Installs on the unsupported branches have no maintainer to patch them, so in our view their fix is a version change.
  • Who has to decide decision Lix operators on 2.95.x have to pick the 2.95.4 upgrade script over plain nix upgrade-nix. An upgrade command that can uninstall what it upgrades is a poor tool for an emergency window.
  • What it costs cost CI that evaluates pull requests from strangers needs isolated machines for those evaluations, which is new hardware or new VM plumbing for teams that run them on the shared daemon host.

Next story · Build · 2h ago

GNOME OS Preview gives non-developers an image built from stable GNOME 51.1

Confirmed2 publishers

Nix now unpacks uploads into a private temporary folder and moves them into place only after the hash checks out. It also bars untrusted users from repair mode [11]. In our view that is the right fix: nothing reaches the final store path until it has passed the check. The old order dates to Nix 2.1, the release that added streaming uploads [10]. According to Tech AI Wire's summary, the most serious issue lets a local user corrupt files that later run as root [6].

That bug is one of several. Nix has published five GitHub advisories, and none has a CVE number yet [4]. LWN reports that CVE IDs have not been requested [5].

The scope is wider than the one bug. As LWN quotes it, the announcement says: "All systems that build untrusted derivations are affected." [3] In our view, a CI account that builds derivations from outside contributors falls under that sentence even when allowed-users lists only the account itself.

The Lix team's write-up, per Tech AI Wire, shows how long coordination ran [16]. Counting to October 13, 76 days passed between the overflow report and the joint release, and 45 between the ready fix and that release [21][22]. That assumes all the dates fall in 2026. The macOS chain and the sandbox escape arrived inside that window, so the release bundles bugs that reached the team weeks apart [16].

The Lix post is explicit on one point: its daemon should not be treated as a security boundary. For build farms, its recommendation is to run the daemon under an unprivileged account wherever they can [17]. In our view that is the longer-term change for build farms, since patching closes only the bugs found so far.

Installs made with the multi-user script need one more step. The advisory gives commands that make every store path owned by root again [19]. Guix is not affected [15]. The advisory credits Guthrie McAfee Armstrong and a researcher known as joaoviictorti for finding the main bug [12].

What to watch

  • Whether the NixOS unstable and 26.05 channel updates land, since until then NixOS hosts cannot patch through the channel.
  • Whether CVE IDs get requested and assigned, so that tooling keyed to them can flag affected installs.
  • Public detail on the four Nix advisories beyond GHSA-jwvx-xq5j-gc56, which would show how the chain fits together.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence68
Adoption
Not scored
Hype gap−5
Incentives
Not scored
Confidence70
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    The Nix and Lix projects jointly disclosed security flaws on October 13, 2026 that can be chained into root access on machines running their package-building daemons.

    Reported SupportedView cited source
  2. [2]

    Releases with fixes from each of the Lix and Nix projects were available on the day of the announcement.

    Reported SupportedView cited source
  3. [3]

    "All systems that build untrusted derivations are affected."

    Reported Supported Source: Joint Nix and Lix announcement, as quoted by LWNView cited source
  4. [4]

    The Nix side has published five GitHub advisories, and none has a CVE number yet.

    Reported SupportedView cited source
  5. [5]

    CVE IDs have not yet been requested for the Nix and Lix vulnerabilities.

    Reported SupportedView cited source
  6. [6]

    The most serious of the issues listed in the joint advisory lets a local user corrupt files that later run as root.

    Reported SupportedView cited source
  7. [7]

    According to Nix advisory GHSA-jwvx-xq5j-gc56, the daemon unpacked an uploaded archive straight into its final store path and checked the archive's hash only afterward.

    Reported SupportedView cited source
  8. [8]

    Vulnerable versions let untrusted users request a repair, which replaces an existing store path; if the hash check failed, the malicious files stayed on disk.

    Reported SupportedView cited source
  9. [9]

    When the daemon runs as root, any user listed in allowed-users could execute code as root; until upgrading, Tech AI Wire advises trimming that list to the accounts that need to build.

    Reported SupportedView cited source
  10. [10]

    The flaw dates back to Nix 2.1, which added streaming uploads.

    Reported SupportedView cited source
  11. [11]

    The fix bars untrusted users from repair mode and unpacks uploads into a private temporary folder, moving them into place only after the hash checks out.

    Reported SupportedView cited source
  12. [12]

    The advisory credits Guthrie McAfee Armstrong and a researcher known as joaoviictorti for finding the main bug.

    Reported SupportedView cited source
  13. [13]

    The advisory says unsupported Nix branches 2.29, 2.32 and 2.33 should be presumed vulnerable, and Lix 2.93 and older are affected but no longer maintained.

    Reported SupportedView cited source
  14. [14]

    Updates are in progress for the NixOS unstable and 26.05 channels.

    Reported SupportedView cited source
  15. [15]

    The Guix package manager is not affected.

    Reported SupportedView cited source
  16. [16]

    In the Lix team's write-up, the overflow bug was disclosed to the team on July 29 and fixes were ready on August 29; the macOS privilege escalation chain arrived on September 12 and the sandbox escape on October 9.

    Reported SupportedView cited source
  17. [17]

    The Lix post stresses that its daemon is not a security boundary and advises build farms to run the daemon as an unprivileged user where possible.

    Reported SupportedView cited source
  18. [18]

    The advisory warns that plain nix upgrade-nix can uninstall Lix 2.95.x before installing the new version; the Lix 2.95.4 upgrade script should be used instead.

    Reported SupportedView cited source
  19. [19]

    If Nix was installed with the multi-user script, the advisory gives commands to make every store path owned by root again.

    Reported SupportedView cited source
  20. [20]

    CI systems that evaluate pull requests from strangers could hit the overflow bug, and Tech AI Wire advises running those evaluations on isolated machines.

    Reported SupportedView cited source
  21. [21]

    76 days passed between the July 29 overflow report to the Lix team and the October 13 joint release, assuming all dates fall in 2026.

    Derived Supported
  22. [22]

    45 days passed between the August 29 date on which Lix fixes were ready and the October 13 joint release, assuming all dates fall in 2026.

    Derived Supported

Sources

2 independent publishers whose own reporting we read for this story.

  1. dev.to

    1 article · October 13, 2026

    Nix and Lix patch daemon flaws that allow local root
  2. lwn.net

    1 article · October 13, 2026

    Nix and Lix local root-privilege-escalation vulnerabilities

Topics and entities

Topics

Entities