A vulnerability identified as critical has been detected in npm CLI. Affected is an unknown function. The manipulation leads to permission issues.

This vulnerability is traded as CVE-2026-0775. An attack has to be approached locally. There is no exploit available.