cybercrime.clubhttps://cybercrime.club/tags/symlink/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usThu, 09 Apr 2026 10:09:33 -0400CVE-2026-39860: Nix Package Manager Symlink Bug Gives Any User Root on Multi-User Installshttps://cybercrime.club/posts/nix-cve-2026-39860-symlink-root-privilege-escalation/Thu, 09 Apr 2026 10:09:33 -0400https://cybercrime.club/posts/nix-cve-2026-39860-symlink-root-privilege-escalation/A critical symlink-following flaw in the Nix daemon lets unprivileged users overwrite arbitrary files as root during fixed-output derivation builds.vulnerabilities