diff --git a/nixos/modules/services/networking/hostapd.nix b/nixos/modules/services/networking/hostapd.nix
index 28dd6db874bc..9bf9f1a4c3a0 100644
--- a/nixos/modules/services/networking/hostapd.nix
+++ b/nixos/modules/services/networking/hostapd.nix
@@ -1447,7 +1447,7 @@ in
         DeviceAllow = "/dev/rfkill rw";
         NoNewPrivileges = true;
         PrivateUsers = false; # hostapd requires true root access.
-        PrivateTmp = true;
+        PrivateTmp = false; # hostapd_cli opens a socket in /tmp
         ProtectClock = true;
         ProtectControlGroups = true;
         ProtectHome = true;