CERT24CVE-2026-121745 — nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command lineLoading data…
CERT24Threat Observatory
Period

CVE-2026-121745 — nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command line

According to the CIRCL CERT title, nvm exposes the NVM_AUTH_HEADER environment variable on the curl/wget command line to other local users. The source associates the vulnerability with CWE-214: Invocation of Process Using Visible Sensitive Information.

← Back to intelligence

CVE-2026-121745 — nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command line

According to the CIRCL CERT title, nvm exposes the NVM_AUTH_HEADER environment variable on the curl/wget command line to other local users. The source associates the vulnerability with CWE-214: Invocation of Process Using Visible Sensitive Information.