Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-44029

An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mitre

Description

An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 (introduced in 2.24.7);

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NixOS Nix

Default version status: unaffected

  • 2.24.7 to < 2.28.7affected
  • 2.29.0 to < 2.29.4affected
  • 2.30.0 to < 2.30.5affected
  • 2.31.0 to < 2.31.5affected
  • 2.32.0 to < 2.32.8affected
  • 2.33.0 to < 2.33.6affected
  • 2.34.0 to < 2.34.7affected

References