CVE-2026-25740: Nixos Nixpkgs

Medium severity, CVSS 5.8. EPSS: 0.2% chance of exploitation in the next 30 days.

captive browser, a dedicated Chrome instance to log into captive portals without messing with DNS settings. In 25.05 and earlier, when programs.captive-browser is enabled, any user of the system can run arbitrary commands with the CAP_NET_RAW capability (binding to privileged ports, spoofing localhost traffic from privileged services...). This vulnerability is fixed in 25.11 and 26.05.

Affected products

• Nixos Nixpkgs: up to and including 25.05

Published 2026-02-09. Last modified 2026-06-17.