CVE-2026-121751 | nvm-sh nvm up to 0.40.8 LTS Alias Normalization nvm_normalize_lts os command injection

November 5, 2026 Yanac

A vulnerability was found in nvm-sh nvm up to 0.40.8. It has been rated as problematic. Impacted is the function nvm_normalize_lts of the component LTS Alias Normalization. The manipulation leads to os command injection.

This vulnerability is traded as CVE-2026-121751. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More