Skip to content

CVE-2026-39860

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
April 17, 2026
Last Seen
April 17, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Privilege Escalation Flaw in Nix Package Manager Fixed in Fedora 4372.8

A serious privilege escalation vulnerability (CVE-2026-39860) was discovered in the Nix package manager, affecting users of Fedora 43 and earlier versions. The flaw allows non-root users to escalate their privileges via symlink following during output registration. This vulnerability was published o...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

CWE-269 - Improper Privilege ManagementT1068 - Exploitation for Privilege EscalationLinuxUnix