CVE-2024-45845

Summary

CVE-2024-45845 is a vulnerability found in Nix versions 2.24 through 2.24.5, which allows for directory traversal due to improper handling of a symlink and a directory with the same name. Affected products include various NixOS components identified by codes such as yf0doM, yf0iwf, and others. This vulnerability poses a high risk to organizations, as it can lead to significant confidentiality impacts without requiring user interaction or special privileges, making it easily exploitable over a network. To remediate this issue, users are advised to update their Nix installations to versions beyond 2.24.5 where the vulnerability has been addressed. The exploitability score for this vulnerability is rated at 3.9, indicating a low attack complexity and highlighting its potential threat level.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.