A vulnerability was found in pnpm up to 10.25.0. It has been declared as critical. This affects an unknown function of the component Installation. The manipulation results in protection mechanism failure.

This vulnerability is identified as CVE-2025-69264. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.