pnpm is a package manager. Prior to version 10.28.2, when pnpm installs a file: (directory) or git: dependency, it follows symlinks and reads their target contents without constraining them to the package root. A malicious package containing a symlink to an absolute path (e.g., /etc/passwd, ~/.ssh/id_rsa) causes pnpm to copy that file's contents into node_modules, leaking local data. The vulnerability only affects file: and git: dependencies. Registry packages (npm) have symlinks stripped during publish and are NOT affected. The issue impacts developers installing local/file dependencies andCI/CD pipelines installing git dependencies. It can lead to credential theft via symlinks to ~/.aws/credentials, ~/.npmrc, ~/.ssh/id_rsa. Version 10.28.2 contains a patch.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-22",
"CWE-59"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24056.json"
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:pnpm:pnpm:*:*:*:*:*:node.js:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "10.28.2"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "b277b45bc35ae77ca72d7634d144bbd58a48b70f"
}
],
"source": "REFERENCES_COMMIT"
},
{
"original_tag": "v10.28.2",
"range": [
{
"fixed": "89a2c4ec38735945ccc7a208221e696fae655e3f"
}
],
"source": "REFERENCES_TAG"
}
]
}