CVE-2026-39860: A Critical Vulnerability in Nix and What to Do About It