CVE-2026-121748 | nvm-sh nvm up to 0.40.8 Delete Prefix code injection

SecurityVulns
Yanac

A vulnerability categorized as critical has been discovered in nvm-sh nvm up to 0.40.8. The affected element is an unknown function of the component Delete Prefix. The manipulation results in code injection.

This vulnerability is known as CVE-2026-121748. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More