CVE-2026-51190 | Serverless-Devs up to 3.1.11 Init Command child_process.spawn os command injection

A vulnerability labeled as critical has been found in Serverless-Devs up to 3.1.11. Affected by this vulnerability is the function child_process.spawn of the component Init Command. Such manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-51190. The attack can be launched remotely. No exploit exists.