CVE-2025-59378
In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the bu…
Published: 2025-09-15 · CVSS: 5.7 · CVSS 3.1
In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to gain the privileges of the build user that runs it (even after the build has ended).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7