Vulnerabilities > GNU > Guix

DATE CVE VULNERABILITY TITLE RISK
2021-04-26 CVE-2021-27851 Link Following vulnerability in GNU Guix
A security vulnerability that can lead to local privilege escalation has been found in ’guix-daemon’.
local
low complexity
gnu CWE-59
5.5
2019-10-17 CVE-2019-18192 Incorrect Permission Assignment for Critical Resource vulnerability in GNU Guix 1.0.1
GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365.
local
low complexity
gnu CWE-732
7.8