CVE-2026-121745 | nvm-sh Nvm up to 0.40.8 Downloader nvm_download NVM_AUTH_HEADER information disclosure

November 5, 2026 Yanac

A vulnerability was found in nvm-sh Nvm up to 0.40.8. It has been classified as problematic. This vulnerability affects the function nvm_download of the component Downloader. Performing a manipulation of the argument NVM_AUTH_HEADER results in information disclosure.

This vulnerability is reported as CVE-2026-121745. The attack requires a local approach. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More