Skip to content
Sign in
5.7 Medium

CVE-2025-59378 In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program…

Description

In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the build user that runs it (even after the build has ended).

Affected products and versions

Product Affected versions Fixed in
Guix Versions not published

Other CVEs of Guix

The 2 CVEs of Guix →
CVE-2024-52867 guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users… 8.1 High
Track this CVE