FKIE_CVE-2025-52992

Vulnerability from fkie_nvd - Published: 2025-06-27 14:15 - Updated: 2025-06-30 18:38
Severity ?
3.2 (Low) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Summary
The Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build fails. This may allow arbitrary processes to modify the content of a store outside of the build sandbox. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b.
References
cve@mitre.orghttps://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017
cve@mitre.orghttps://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/
cve@mitre.orghttps://labs.snyk.io
cve@mitre.orghttps://lix.systems/blog/2025-06-24-lix-cves/
cve@mitre.orghttps://security-tracker.debian.org/tracker/CVE-2025-52992
cve@mitre.orghttps://security.snyk.io/vuln/?search=CVE-2025-52992
Impacted products
Vendor Product Version
To clipboard 

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build fails. This may allow arbitrary processes to modify the content of a store outside of the build sandbox. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b."
    },
    {
      "lang": "es",
      "value": "Los gestores de paquetes Nix, Lix y Guix no configuran correctamente los permisos cuando falla una compilaci\u00f3n derivada. Esto puede permitir que procesos arbitrarios modifiquen el contenido de un almac\u00e9n fuera del entorno de pruebas de compilaci\u00f3n. Esto afecta a Nix anteriores a 2.24.15, 2.26.4, 2.28.4 y 2.29.1; Lix anteriores a 2.91.2, 2.92.2 y 2.93.1; y Guix anteriores a 1.4.0-38.0e79d5b. "
    }
  ],
  "id": "CVE-2025-52992",
  "lastModified": "2025-06-30T18:38:48.477",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 3.2,
          "baseSeverity": "LOW",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.4,
        "impactScore": 1.4,
        "source": "cve@mitre.org",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-06-27T14:15:41.990",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://labs.snyk.io"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://lix.systems/blog/2025-06-24-lix-cves/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://security-tracker.debian.org/tracker/CVE-2025-52992"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://security.snyk.io/vuln/?search=CVE-2025-52992"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ],
      "source": "cve@mitre.org",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.