# Flox 1.18.2 is released!

**URL:** <https://discourse.flox.dev/t/flox-1-18-2-is-released/1281>\
**Category:** Announcements\
**Created:** [October 14, 2026, 1:16pm UTC](https://discourse.flox.dev/t/flox-1-18-2-is-released/1281 "2026-10-14T13:16:20Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jbayer](https://yyz2.discourse-cdn.com/flex036/user_avatar/discourse.flox.dev/jbayer/32/757_2.png) [@jbayer](https://discourse.flox.dev/u/jbayer)\
**Post date:** [October 14, 2026, 1:16pm UTC](https://discourse.flox.dev/t/flox-1-18-2-is-released/1281/1 "2026-10-14T13:16:20Z")

</div>

**Fixes**

- Updates the bundled Nix to 2.31.6 to address the [October 2026 Nix/Lix security advisory](https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547). On multi-user installations — Flox’s default — several of these issues can be combined into local root privilege escalation.

**All Flox releases prior to 1.18.2 are affected.** Each bundled a Nix version covered by the advisory (1.18.0–1.18.1 shipped the affected 2.31.5; earlier releases shipped older, also-affected Nix). Upgrade to 1.18.2.

See the [October 13th 2026 Nix security advisory addressed by Flox 1.18.2](https://discourse.flox.dev/t/october-13th-2026-nix-security-advisory-addressed-by-flox-1-18-2/1280)

## Download Links

- [DEB (x86\_64-linux)](https://downloads.flox.dev/by-env/stable/deb/flox-1.18.2.x86_64-linux.deb)
- [DEB (aarch64-linux)](https://downloads.flox.dev/by-env/stable/deb/flox-1.18.2.aarch64-linux.deb)
- [RPM (x86\_64-linux)](https://downloads.flox.dev/by-env/stable/rpm/flox-1.18.2.x86_64-linux.rpm)
- [RPM (aarch64-linux)](https://downloads.flox.dev/by-env/stable/rpm/flox-1.18.2.aarch64-linux.rpm)
- [OSX (x86\_64-darwin)](https://downloads.flox.dev/by-env/stable/osx/flox-1.18.2.x86_64-darwin.pkg)
- [OSX (aarch64-darwin)](https://downloads.flox.dev/by-env/stable/osx/flox-1.18.2.aarch64-darwin.pkg)

> [!NOTE]  
> You can find the [SHA256 checksums for Flox 1.18.2](https://downloads.flox.dev/by-env/stable/flox-1.18.2.SHA256SUMS) and [SHA512 checksums for Flox 1.18.2](https://downloads.flox.dev/by-env/stable/flox-1.18.2.SHA512SUMS) online.