pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config (CVE-2026-59195)

pnpm is a package manager that, before versions 10.34.4 and 11.8.0, accepts package names from the env lockfile's configDependencies section and uses these names directly to create symlinks under node_modules/.pnpm-config. A malicious repository can include a specially crafted pnpm-lock.yaml file with a traversal-shaped config dependency name, causing pnpm install to create symlinks outside the intended directory. This path traversal vulnerability allows symlink creation outside the node_modules/.pnpm-config directory, potentially leading to unauthorized file system modifications. The issue is resolved in pnpm versions 10.34.4 and 11.8.0.

This vulnerability allows an attacker who can supply a malicious pnpm-lock.yaml file to cause pnpm to create symbolic links outside the intended directory, potentially leading to unauthorized file system modifications. The CVSS score of 8.2 indicates high severity with impact on integrity and availability. There is no indication of confidentiality impact. No known exploits in the wild have been reported.

A fix is available in pnpm versions 10.34.4 and 11.8.0. Users should upgrade to at least these versions to remediate the vulnerability. No additional mitigations are specified.