Get real-time updates on Telegram

Nx daemon and plugin worker sockets are accessible to other local users

CVE-2026-104854 affects nx. EPSS 0.00141 (percentile 0.02875), scored 2026-10-04. Affected range: >= 14.6.0, < 22.7.9. Fixed version: 22.7.9. Affected range: >= 23.0.0, < 23.1.2. Fixed version: 23.1.2.

Published 2026-10-06 00:14:27.378109+00:00

CVE

CVE-2026-104854

Product

nx

CCR priority

0.0 /100 (P5)

EPSS

0.00141 · percentile 0.02875 · 2026-10-04

KEV

no

Affected products

• nx · >= 14.6.0, < 22.7.9 · Fixed version: 22.7.9
• nx · >= 23.0.0, < 23.1.2 · Fixed version: 23.1.2

Provenance

• GitHub Advisory Database · Source record · observed 2026-10-06 00:14:20.210633+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-104854.html