CVE-2025-52992 — The Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build fails. This may allow arbitrary processes to modify the content of a store outside of the build sandbox — CVE Database · The Intelligence Room