A vulnerability identified as critical has been detected in vercel turborepo up to 2.9.13999. This vulnerability affects unknown code. Performing a manipulation results in command injection.

This vulnerability is identified as CVE-2026-46508. The attack is only possible with local access. There is not any exploit available.

You should upgrade the affected component.