NixOS is a Linux distribution built on a declarative package management system that enables reproducible and atomic system configurations. The vendor's observed vulnerability disclosures center on its NixOS platform and focus on certificate validation weaknesses that arise in its package ecosystem and system components. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Nixos Project over time
Signals from CVEs in this vendor scope (24 CVEs).
24 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-31431HIGH In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the c | Apr 22, 2026 | 7.8 | 99 | YES | YES |
CVE-2024-12084CRITICAL A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIG | Jan 15, 2025 | 9.8 | 75 | NO | NO |
CVE-2026-39860HIGH Nix is a package manager for Linux and other Unix systems. A bug in the fix for CVE-2024-27297 allowed for arbitrary overwrites of files writable by the Nix process orchestrating t | Apr 8, 2026 | 8.4 | 33 | NO | NO |
CVE-2024-12085HIGH A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparis | Jan 14, 2025 | 7.5 | 32 | NO | NO |
CVE-2024-12088HIGH A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symb | Jan 14, 2025 | 7.5 | 28 | NO | NO |
CVE-2024-45593HIGH Nix is a package manager for Linux and other Unix systems. A bug in Nix 2.24 prior to 2.24.6 allows a substituter or malicious user to craft a NAR that, when unpacked by Nix, cause | Sep 10, 2024 | 8.8 | 28 | NO | NO |
CVE-2024-12087HIGH A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled | Jan 14, 2025 | 7.5 | 27 | NO | NO |
CVE-2026-44029MEDIUM An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fi | May 5, 2026 | 5.3 | 25 | NO | NO |
CVE-2024-12086MEDIUM A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a cl | Jan 14, 2025 | 6.8 | 25 | NO | NO |
CVE-2019-17365HIGH Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable. | Oct 9, 2019 | 7.8 | 25 | NO | NO |
Signals from CVEs in this vendor scope (24 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Nixos Project.
Media articles that mention a CVE ID that affects a product developed by Nixos Project — matched by CVE ID, not by vendor name.