{"id":"CVE-2026-104854","summary":"Nx daemon and plugin worker sockets are accessible to other local users","details":"Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain sockets for its daemon and isolated plugin workers in shared temporary locations without owner-only directory and socket permissions. Another unprivileged local account on a shared build server, developer host, or multi-user container can discover and connect to a running socket because the transport performs no authentication and relies on filesystem containment. The daemon's PROCESS_IN_BACKGROUND request accepts a module path and invokes its default export, allowing a caller that controls a file to execute code as the account running Nx; other handlers can expose workspace file contents, project graphs, and task hashes. Disabling the daemon alone does not remove the vulnerable plugin-worker sockets, while single-user machines without another local account are not exposed. This issue is fixed in versions 22.7.9 and 23.1.2.","aliases":["GHSA-w3vv-58gj-gw77"],"modified":"2026-10-04T02:46:02.704463058Z","published":"2026-10-02T16:59:48.238Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-269","CWE-732"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104854.json"},"references":[{"type":"WEB","url":"https://github.com/nrwl/nx/releases/tag/22.7.9"},{"type":"WEB","url":"https://github.com/nrwl/nx/releases/tag/23.1.2"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104854.json"},{"type":"ADVISORY","url":"https://github.com/nrwl/nx/security/advisories/GHSA-w3vv-58gj-gw77"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104854"},{"type":"FIX","url":"https://github.com/nrwl/nx/commit/3298fd8b2dd066167eb3cc0410643994a59b0bba"},{"type":"FIX","url":"https://github.com/nrwl/nx/commit/63e1abb287a3d69f8ba981828a1de325d0d3dc68"},{"type":"FIX","url":"https://github.com/nrwl/nx/commit/71c2253b6aac23b008e192c4e2642c42a5e07545"},{"type":"FIX","url":"https://github.com/nrwl/nx/pull/36370"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/nrwl/nx","events":[{"introduced":"5e39b1ed8321aa732f9f7e18c924e11dcb63156c"},{"introduced":"d9d260c1eeea2a160ba39a704fd4821fbc9e0e22"},{"fixed":"02c5d59e8dbbbe30963c0181c6a22cd8c1190a25"},{"fixed":"82723c9cf1a8d46a3b774d0b977001f2c6c19561"},{"fixed":"3298fd8b2dd066167eb3cc0410643994a59b0bba"},{"fixed":"63e1abb287a3d69f8ba981828a1de325d0d3dc68"},{"fixed":"71c2253b6aac23b008e192c4e2642c42a5e07545"}],"database_specific":{"extracted_events":[{"introduced":"14.6.0"},{"fixed":"22.7.9"},{"introduced":"23.0.0"},{"fixed":"23.1.2"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["22.7.8","23.2.0-beta.5","23.1.1","23.2.0-beta.4","23.2.0-beta.3","22.7.7","23.2.0-beta.2","23.2.0-beta.1","23.1.0","23.2.0-beta.0","23.1.0-rc.3","23.1.0-rc.2","22.7.6","23.1.0-rc.1","23.1.0-rc.0","23.1.0-beta.7","23.1.0-beta.6","22.7.0-beta.0","23.1.0-beta.5","23.1.0-beta.4","23.1.0-beta.3","23.1.0-beta.2","23.0.0","23.1.0-beta.1","23.1.0-beta.0","22.7.5","22.7.4","22.7.3","22.7.2","22.7.1","22.7.0","22.7.0-rc.2","22.7.0-rc.1","22.7.0-rc.0","22.7.0-beta.17","22.7.0-beta.16","22.7.0-beta.15","22.7.0-beta.14","22.7.0-beta.13","22.7.0-beta.12","22.7.0-beta.11","22.7.0-beta.10","22.7.0-beta.9","22.7.0-beta.8","22.7.0-beta.7","22.7.0-beta.6","22.7.0-beta.5","22.7.0-beta.4","22.7.0-beta.3","22.7.0-beta.2","22.7.0-beta.1","22.6.0","22.6.0-rc.2","22.6.0-rc.1","22.6.0-rc.0","22.6.0-beta.14","22.6.0-beta.13","22.6.0-beta.12","22.6.0-beta.11","22.6.0-beta.10","22.6.0-beta.9","22.6.0-beta.8","22.6.0-beta.7","22.6.0-beta.6","22.6.0-beta.5","22.6.0-beta.4","22.6.0-beta.3","22.6.0-beta.2","22.6.0-beta.1","22.6.0-beta.0","22.5.0","22.5.0-beta.5","22.5.0-beta.4","22.5.0-beta.3","22.5.0-beta.2","22.5.0-beta.1","22.4.1","22.5.0-beta.0","22.4.0","22.4.0-beta.5","22.4.0-beta.4","22.4.0-beta.3","22.4.0-beta.2","22.4.0-beta.1","22.4.0-beta.0","22.3.0","22.3.0-beta.3","22.3.0-beta.2","22.3.0-beta.1","22.2.3","22.3.0-beta.0","22.2.2","22.2.1","22.2.0","22.2.0-beta.4","22.2.0-beta.3","22.2.0-beta.2","22.2.0-beta.1","22.2.0-beta.0","22.1.1","22.1.0","22.1.0-rc.5","22.1.0-rc.4","22.1.0-rc.3","22.1.0-rc.2","22.1.0-rc.1","22.1.0-rc.0","22.1.0-beta.8","22.1.0-beta.7","22.1.0-beta.6","22.1.0-beta.5","22.1.0-beta.4","22.1.0-beta.3","22.1.0-beta.2","22.1.0-beta.1","22.0.1","22.1.0-beta.0","22.0.0","22.0.0-rc.0","22.0.0-beta.9","22.0.0-beta.8","22.0.0-beta.7","22.0.0-beta.6","22.0.0-beta.5","22.0.0-beta.4","22.0.0-beta.3","22.0.0-beta.2","22.0.0-beta.1","22.0.0-beta.0","21.6.1","21.6.1-rc.0","21.6.1-beta.4","21.6.1-beta.3","21.6.1-beta.2","21.6.1-beta.1","21.5.1","21.6.1-beta.0","21.5.1-beta.5","21.5.1-beta.4","21.5.1-beta.3","21.5.0-beta.2","21.4.0","21.5.0-beta.1","21.5.0-beta.0","21.4.0-beta.12","21.4.0-beta.11","21.4.0-beta.10","21.4.0-beta.9","21.4.0-beta.8","21.4.0-beta.7","21.4.0-beta.6","21.4.0-beta.5","21.4.0-beta.4","21.4.0-beta.3","21.4.0-beta.2","21.4.0-beta.1","21.3.0","21.4.0-beta.0","21.3.0-rc.0","21.3.0-beta.7","21.3.0-beta.6","21.3.0-beta.5","21.3.0-beta.4","21.3.0-beta.3","21.3.0-beta.2","21.3.0-beta.1","21.2.1","21.3.0-beta.0","21.2.0","21.2.0-beta.5","21.2.0-beta.4","21.2.0-beta.3","21.2.0-beta.2","21.2.0-beta.1","21.1.0","21.1.0-beta.2","21.0.3","21.1.0-beta.1","21.1.0-beta.0","21.0.4-beta.0","21.0.2","21.0.1","21.0.0","21.0.0-rc.4","21.0.0-rc.3","21.0.0-rc.2","21.0.0-rc.1","21.0.0-rc.0","21.0.0-beta.12","21.0.0-beta.11","21.0.0-beta.10","21.0.0-beta.9","21.0.0-beta.8","20.8.0","21.0.0-beta.7","21.0.0-beta.6","21.0.0-beta.5","21.0.0-beta.3","21.0.0-beta.4","20.8.0-rc.0","20.8.0-beta.2","20.8.0-beta.1","20.8.0-beta.0","20.7.0","20.7.0-beta.3","20.7.0-beta.2","20.7.0-beta.1","20.6.0-beta.1","20.6.0","20.7.0-beta.0","20.5.0","20.6.0-beta.0","20.5.0-rc.4","20.5.0-rc.3","20.5.0-rc.2","20.5.0-rc.1","20.5.0-rc.0","20.5.0-beta.5","20.5.0-beta.4","20.5.0-beta.3","20.5.0-beta.2","20.4.0-rc.0","20.4.0","20.5.0-beta.1","20.5.0-beta.0","20.4.0-beta.2","20.4.0-beta.1","20.4.0-beta.0","20.3.0","20.3.0-rc.0","20.3.0-beta.1","20.3.0-beta.0","20.2.0","20.2.0-rc.0","20.2.0-beta.7","20.2.0-beta.6","20.2.0-beta.5","20.2.0-beta.4","20.2.0-beta.3","20.2.0-beta.2","20.2.0-beta.1","20.1.0","20.2.0-beta.0","20.1.0-beta.5","20.1.0-beta.4","20.1.0-beta.3","20.1.0-beta.2","20.1.0-beta.1","20.1.0-beta.0","20.0.0","20.0.0-rc.0","20.0.0-beta.8","20.0.0-beta.7","20.0.0-beta.6","20.0.0-beta.5","20.0.0-beta.4","20.0.0-beta.3","19.8.0","20.0.0-beta.2","20.0.0-beta.1","20.0.0-beta.0","19.8.0-beta.3","19.8.0-beta.2","19.8.0-beta.1","19.8.0-beta.0","19.7.2","19.7.1","19.7.0","19.7.0-beta.6","19.7.0-beta.5","19.7.0-beta.4","19.7.0-beta.3","19.7.0-beta.2","19.7.0-beta.1","19.7.0-beta.0","19.6.0","19.6.0-rc.0","19.6.0-beta.6","19.6.0-beta.5","19.6.0-beta.4","19.6.0-beta.3","19.6.0-beta.2","19.6.0-beta.1","19.6.0-beta.0","19.5.1","19.5.0","19.5.0-beta.5","19.5.0-beta.4","19.5.0-beta.3","19.5.0-beta.2","19.5.0-beta.0","19.4.0","19.4.0-rc.0","19.4.0-beta.2","19.3.0-beta.2","19.4.0-beta.1","19.4.0-beta.0","19.3.0-beta.1","19.2.3","19.2.2","19.2.1","19.3.0-beta.0","19.2.0","19.2.0-rc.1","19.2.0-rc.0","19.2.0-beta.7","19.2.0-beta.6","19.2.0-beta.5","19.2.0-beta.4","19.2.0-beta.3","19.2.0-beta.2","16.9.1","19.2.0-beta.1","19.2.0-beta.0","19.1.0","19.1.0-beta.5","19.1.0-beta.4","19.1.0-beta.3","19.1.0-beta.2","19.1.0-beta.1","19.1.0-beta.0","19.0.0-rc.2","19.0.0","19.0.0-rc.1","19.0.0-rc.0","19.0.0-beta.11","19.0.0-beta.10","19.0.0-beta.9","19.0.0-beta.8","19.0.0-beta.6","19.0.0-beta.5","19.0.0-beta.4","19.0.0-beta.3","19.0.0-beta.2","19.0.0-beta.1","19.0.0-beta.0","18.3.1","18.3.0","18.3.0-beta.3","18.3.0-beta.2","18.3.0-beta.1","17.0.5","18.3.0-beta.0","17.0.4","18.2.1","18.2.0","18.2.0-beta.3","18.2.0-beta.2","18.2.0-beta.1","18.1.2","18.2.0-beta.0","18.1.1","18.1.0-beta.10","18.1.0-beta.9","18.1.0-beta.8","18.1.0-beta.7","18.1.0-beta.6","18.1.0-beta.5","18.1.0-beta.4","18.1.0-beta.3","18.1.0-beta.2","18.1.0-beta.1","18.1.0-beta.0","18.0.1","18.0.0","18.0.0-beta.3","18.0.0-beta.2","18.0.0-beta.1","17.3.0","18.0.0-beta.0","17.3.0-rc.1","17.3.0-rc.0","17.3.0-beta.8","17.3.0-beta.7","17.3.0-beta.6","17.3.0-beta.5","17.3.0-beta.4","17.3.0-beta.3","17.3.0-beta.2","17.3.0-beta.1","17.2.0","17.2.0-rc.0","17.2.0-beta.15","17.2.0-beta.14","17.2.0-beta.13","17.2.0-beta.12","17.2.0-beta.11","17.2.0-beta.10","17.2.0-beta.9","17.2.0-beta.8","17.2.0-beta.7","17.2.0-beta.2","17.2.0-beta.1","17.2.0-beta.0","17.1.1","17.1.0","17.1.0-rc.0","17.1.0-beta.5","17.1.0-beta.4","17.1.0-beta.3","17.1.0-beta.2","17.0.2","17.1.0-beta.0","17.0.1","17.0.0","17.0.0-rc.3","17.0.0-rc.2","17.0.0-rc.1","17.0.0-rc.0","17.0.0-beta.8","17.0.0-beta.7","17.0.0-beta.6","17.0.0-beta.5","17.0.0-beta.4","17.0.0-beta.2","17.0.0-beta.1","17.0.0-beta.0","16.10.0-beta.2","16.10.0","16.10.0-beta.1","16.10.0-beta.0","16.9.0","16.9.0-rc.1","16.9.0-rc.0","16.9.0-beta.4","16.9.0-beta.3","16.9.0-beta.2","16.9.0-beta.1","16.9.0-beta.0","16.8.0","16.8.0-rc.0","16.8.0-beta.7","16.8.0-beta.6","16.8.0-beta.5","16.8.0-beta.4","16.8.0-beta.3","16.8.0-beta.2","16.8.0-beta.1","16.8.0-beta.0","16.7.0","16.7.0-rc.1","16.7.0-rc.0","16.7.0-beta.6","16.7.0-beta.5","16.7.0-beta.4","16.7.0-beta.3","16.7.0-beta.2","16.7.0-beta.1","16.7.0-beta.0","16.6.0","16.6.0-beta.8","16.6.0-beta.7","16.6.0-beta.6","16.6.0-beta.5","16.6.0-beta.4","16.6.0-beta.3","16.6.0-beta.2","16.6.0-beta.1","16.6.0-beta.0","16.5.0","16.5.0-beta.3","16.5.0-beta.2","16.5.0-beta.1","16.5.0-beta.0","16.4.0","16.4.0-beta.16","16.4.0-beta.15","16.4.0-beta.14","16.4.0-beta.11","16.4.0-beta.10","16.4.0-beta.9","16.4.0-beta.8","16.4.0-beta.7","16.4.0-beta.6","16.4.0-beta.5","16.4.0-beta.4","16.4.0-beta.3","16.4.0-beta.2","16.4.0-beta.1","16.4.0-beta.0","16.3.1","16.3.0","16.3.0-beta.15","16.3.0-beta.14","16.3.0-beta.13","16.3.0-beta.12","16.3.0-beta.8","16.3.0-beta.7","16.3.0-beta.6","16.3.0-beta.5","16.2.1","16.3.0-beta.4","16.3.0-beta.1","16.3.0-beta.0","16.2.0","16.2.0-beta.3","16.2.0-beta.2","16.2.0-beta.1","16.2.0-beta.0","16.1.0","16.1.0-rc.1","16.1.0-rc.0","16.1.0-beta.0","16.0.0","16.0.0-rc.1","16.0.0-rc.0","16.0.0-beta.8","16.0.0-beta.7","16.0.0-beta.6","16.0.0-beta.5","16.0.0-beta.4","16.0.0-beta.3","16.0.0-beta.2","16.0.0-beta.1","16.0.0-beta.0","15.9.2","15.9.1","15.9.0","15.9.0-rc.2","15.9.0-rc.1","15.9.0-rc.0","15.9.0-beta.11","15.9.0-beta.10","15.9.0-beta.9","15.9.0-beta.8","15.9.0-beta.7","15.9.0-beta.6","15.9.0-beta.5","15.9.0-beta.4","15.9.0-beta.3","15.9.0-beta.2","15.9.0-beta.1","14.9.0-beta.1","15.9.0-beta.0","15.8.1","15.8.0","15.8.0-beta.8","15.8.0-beta.7","15.8.0-beta.6","15.8.0-beta.5","15.8.0-beta.4","15.8.0-beta.3","15.8.0-beta.2","15.8.0-beta.1","15.8.0-beta.0","15.7.0","15.7.0-beta.6","15.7.0-beta.5","15.7.0-beta.4","15.7.0-beta.3","15.7.0-beta.2","15.7.0-beta.1","15.7.0-beta.0","15.6.0","15.5.1","15.5.0","15.4.8","15.4.7","15.4.6","15.4.5","15.4.4","15.4.3","15.4.2","15.4.1","15.4.0","15.3.3","15.3.2","15.3.1","15.3.0","15.2.0","15.1.0","15.0.7","15.0.5","15.0.4","15.0.3","15.0.2","15.0.1","15.0.0","14.8.0","14.7.18","14.7.17","14.7.16","14.7.15","14.7.14","14.7.13","14.7.12","14.7.11","14.7.10","14.7.9","14.7.8","14.7.7","14.7.6","14.7.5","14.7.4","14.7.3","14.7.2","14.7.1","14.7.0","14.6.5","14.6.4","14.6.3","14.6.2","14.6.1","14.6.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-104854.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}