馃摙 Update your Nix installation, and refrain from building untrustworthy derivations until done.
https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017
Hercules CI Agent uses the running nix daemon, so updating your system Nix is sufficient.