← Retour au blog
tech 5 May 2026

Security Advisory: Local Privilege Escalation in Lix and Nix

A critical vulnerability has been discovered in Lix and Nix daemons, allowing arbitrary code execution. Learn how this flaw impacts systems and the solutions implemented.

Article inspired by the original source
Security Advisory: Local privilege escalation in Lix and Nix ↗ discourse.nixos.org

Introduction

In the tech world, security is not an option but a necessity. Recently, a critical vulnerability was discovered in the Nix and Lix daemons, potentially leading to local privilege escalation. This flaw allows a local attacker to execute arbitrary code as the daemon user, often root in multi-user installations.

Vulnerability Details

The Nix and Lix daemon implementations are affected by buffer overflow vulnerabilities. Identified as GHSA-vh5x-56v6-4368 for Nix, these vulnerabilities are pending CVE attribution by MITRE for both software.

To exploit this issue, an attacker needs access to the Nix daemon. Systems allowing connections to their daemons are affected, but only authorized users can reliably exploit this flaw.

Impact on Systems

All systems using affected versions of Nix (≥ 2.24.4) and Lix (≥ 2.93.0) are potentially vulnerable. However, Guix is not affected by this vulnerability. Substituters can theoretically trigger the issue, but they cannot make enough attempts to mount practical attacks.

Fixes and Updates

The good news is that fixes have been deployed. For Nix, patched versions include 2.34.7, 2.33.6, 2.32.8, and others. Lix also released patched versions, including 2.93.4, 2.94.2, and 2.95.2.

The NixOS security team has also enhanced the ASLR technique's effectiveness to make exploiting these vulnerabilities more difficult.

Conclusion

This vulnerability highlights the importance of proactive security update management in information systems. As a tech decision-maker, it's crucial to stay informed about the latest threats and ensure your company's systems are protected.

Let's discuss your project in 15 minutes.

Nix Lix sécurité élévation de privilèges vulnérabilité
Deepthix newsletter · 100% AI · every Monday 8am

An AI agent reads tech for you.

Our AI agent scans ~200 sources per week and ships the best articles to your inbox Monday 8am. Free. One click to unsubscribe.

Visit the newsletter page →

Want to automate your operations?

Let's talk about your project in 15 minutes.

Book a call