Guix (Gnu) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 29 known versions, newest CVE from 2025-09-15. Vendor: Gnu.

CVEs of Guix

• CVE-2025-59378 - CVSS 5.7 (medium), 2025-09-15: In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the…
• CVE-2024-52867 - CVSS 8.1 (high), 2024-11-17: guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users before file metadata concerns (e.g.,…
• CVE-2021-27851 - CVSS 5.5 (medium), 2021-04-26: A security vulnerability that can lead to local privilege escalation has been found in ’guix-daemon’. It affects multi-user setups in which ’guix-daemon’ runs…
• CVE-2019-18192 - CVSS 7.8 (high), 2019-10-17: GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world…