Nx daemon and plugin worker sockets are accessible to other local users

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-104854 · Microsoft / collected KEV context

EUVD-2026-91762

GHSA-w3vv-58gj-gw77

cve-program · CVE-2026-104854

• https://github.com/nrwl/nx/security/advisories/GHSA-w3vv-58gj-gw77
• https://github.com/nrwl/nx/pull/36370
• https://github.com/nrwl/nx/commit/3298fd8b2dd066167eb3cc0410643994a59b0bba
• https://github.com/nrwl/nx/commit/63e1abb287a3d69f8ba981828a1de325d0d3dc68
• https://github.com/nrwl/nx/commit/71c2253b6aac23b008e192c4e2642c42a5e07545
• https://github.com/nrwl/nx/releases/tag/22.7.9
• https://github.com/nrwl/nx/releases/tag/23.1.2

euvd · EUVD-2026-91762

• https://github.com/nrwl/nx/security/advisories/GHSA-w3vv-58gj-gw77
• https://github.com/nrwl/nx/pull/36370
• https://github.com/nrwl/nx/commit/3298fd8b2dd066167eb3cc0410643994a59b0bba
• https://github.com/nrwl/nx/commit/63e1abb287a3d69f8ba981828a1de325d0d3dc68
• https://github.com/nrwl/nx/commit/71c2253b6aac23b008e192c4e2642c42a5e07545
• https://github.com/nrwl/nx/releases/tag/22.7.9
• https://github.com/nrwl/nx/releases/tag/23.1.2

nvd · CVE-2026-104854

• https://github.com/nrwl/nx/commit/3298fd8b2dd066167eb3cc0410643994a59b0bba
• https://github.com/nrwl/nx/commit/63e1abb287a3d69f8ba981828a1de325d0d3dc68
• https://github.com/nrwl/nx/commit/71c2253b6aac23b008e192c4e2642c42a5e07545
• https://github.com/nrwl/nx/pull/36370
• https://github.com/nrwl/nx/releases/tag/22.7.9
• https://github.com/nrwl/nx/releases/tag/23.1.2
• https://github.com/nrwl/nx/security/advisories/GHSA-w3vv-58gj-gw77

osv · GHSA-w3vv-58gj-gw77

• https://github.com/nrwl/nx/security/advisories/GHSA-w3vv-58gj-gw77
• https://nvd.nist.gov/vuln/detail/CVE-2026-104854
• https://github.com/nrwl/nx/pull/36370
• https://github.com/nrwl/nx/commit/3298fd8b2dd066167eb3cc0410643994a59b0bba
• https://github.com/nrwl/nx/commit/63e1abb287a3d69f8ba981828a1de325d0d3dc68
• https://github.com/nrwl/nx/commit/71c2253b6aac23b008e192c4e2642c42a5e07545
• https://github.com/nrwl/nx
• https://github.com/nrwl/nx/releases/tag/22.7.9
• https://github.com/nrwl/nx/releases/tag/23.1.2

No related operational record is retained in the current change model.