CVE-2024-38531 - CVE House
Back to Database
Status published Low CVE-2024-38531

Nix sandbox escape

Vulnerability Description

Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change the permissions of the build directory. After creating a setuid binary in a globally accessible location, a malicious local user can assume the permissions of a Nix daemon worker and hijack all future builds. This issue was patched in version(s) 2.23.1, 2.22.2, 2.21.3, 2.20.7, 2.19.5 and 2.18.4.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-38531

Credits & Attribution

No credits recorded in the NVD database.

References

More from NixOS

View All →
CVE-2025-64766
NixOS has hardcoded credentials in Onlyoffice module
Medium 5.3
CVE-2025-54864
Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins
Medium 6.9
CVE-2025-54800
Hydra persistent XSS in build metrics
High 7.1
CVE-2025-53819
Nix's privilege dropping to build user broke for macOS
High 7.9
CVE-2025-52993
A race condition in the Nix, Lix, and Guix package...
Medium 5.6

Affected Vendor

Affected Software

nix
Vulnerable Versions:
>= 2.23.0, < 2.23.1, >= 2.22.0, < 2.22.2, >= 2.21.0, < 2.21.3, >= 2.20.0, < 2.20.7, >= 2.19.0, < 2.19.5, >= 2.18.0, < 2.18.4

Timeline

Official Publish: June 28th, 2024
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

Weaknesses (CWE)

CWE-278

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.