NixOS is a Linux distribution and declarative package-management ecosystem with a modestly represented but concentrated vulnerability footprint centered on the core NixOS system, the Nix package manager, and related tooling. The vendor's disclosures reflect a meaningful share of serious outcomes and show moderate tendencies toward both confirmed in-the-wild exploitation and public exploit availability, consistent with the attack surface presented by system-level and build-infrastructure software. Recurring vulnerability patterns span path-traversal and cross-site scripting flaws in web-facing components, authentication gaps in critical functions, and information-disclosure issues, pointing to input-handling and access-control demands across the distribution's system-administration and package-build layers. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Nixos over time
Signals from CVEs in this vendor scope (24 CVEs).
24 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-31431HIGH In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the c | Apr 22, 2026 | 7.8 | 99 | YES | YES |
CVE-2024-12084CRITICAL A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIG | Jan 15, 2025 | 9.8 | 75 | NO | NO |
CVE-2024-12085HIGH A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparis | Jan 14, 2025 | 7.5 | 32 | NO | NO |
CVE-2026-39860HIGH Nix is a package manager for Linux and other Unix systems. A bug in the fix for CVE-2024-27297 allowed for arbitrary overwrites of files writable by the Nix process orchestrating t | Apr 8, 2026 | 8.4 | 30 | NO | NO |
CVE-2024-12088HIGH A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symb | Jan 14, 2025 | 7.5 | 28 | NO | NO |
CVE-2024-45593HIGH Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, cause | Sep 10, 2024 | 8.8 | 28 | NO | NO |
CVE-2024-12087HIGH A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled | Jan 14, 2025 | 7.5 | 27 | NO | NO |
CVE-2026-44029MEDIUM An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fi | May 5, 2026 | 5.3 | 25 | NO | NO |
CVE-2024-12086MEDIUM A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a cl | Jan 14, 2025 | 6.8 | 25 | NO | NO |
CVE-2019-17365HIGH Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable. | Oct 9, 2019 | 7.8 | 25 | NO | NO |
Signals from CVEs in this vendor scope (24 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Nixos.
Media articles that mention a CVE ID that affects a product developed by Nixos — matched by CVE ID, not by vendor name.