Nx 14.6.0 to 22.7.9 and 23.1.2 create daemon/plugin-worker Unix sockets in shared temp paths without owner-only perms, allowing another local user to connect without auth. PROCESS_IN_BACKGROUND accepts a module path and executes its default export, enabling code execution as the Nx user; other handlers can leak workspace files/graphs/hashes. Upgrade to 22.7.9 or 23.1.2 to mitigate.