Nix Vulnerability Grants Root Access via NAR Parser Overflow

CVE-2026-44028 is a high-priority stack overflow vulnerability in the Nix Archive (NAR) parser allowing a local user with access to the Nix daemon to potentially gain root via unbounded recursion on coroutine stacks; maintainers released fixes including a 64-level recursion limit, guard pages for coroutine stacks, symlink and filename sanitization, and limits on worker crash forks—users running Nix since 2.24.4 should upgrade to the patched releases immediately.