# CVE-2026-50017: pnpm credential leak via repository-local registry configuration

Source: https://junglewise.ai/threats/cve-2026-50017-pnpm-credential-leak-via-repository-local-registry-configuration  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-25. Updated: 2026-06-26  
License: CC BY 4.0 with a link back

CVE-2026-50017 · Severity: medium · CVSS 4 · Published 2026-06-25

pnpm, a popular JavaScript package manager, contains a vulnerability that can leak sensitive registry authentication tokens. If a developer or automated system runs pnpm commands within a malicious repository, the repository can redirect pnpm to an untrusted server while tricking it into sending the user's private login credentials. This could allow an attacker to steal credentials used to access private software packages, potentially leading to unauthorized access to proprietary code.

Technologies: [pnpm (npm)](https://junglewise.ai/threats/technologies/pnpm). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is CVE-2026-50017 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-50017 being exploited in the wild.

**How severe is CVE-2026-50017?** Medium severity, with a CVSS score of 4, published 25 June 2026.

**Which products and versions are affected?** pnpm (npm) SEMVER:introduced=0,fixed=10.34.0.

**Is there a fix for CVE-2026-50017?** Yes. pnpm (npm): upgrade to 10.34.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-50017 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-50017?** Check whether you run pnpm (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- pnpm (npm): upgrade to 10.34.0 or later

  ```sh
  npm install pnpm@10.34.0
  ```


## Technical details

A credential leakage vulnerability exists in pnpm's auth-header logic. When a repository-local `.npmrc` file overrides the default registry URL, pnpm may still attach unscoped `_authToken`, `_auth`, or username/password credentials from the user's global configuration to requests sent to the new, potentially untrusted registry. This occurs because pnpm binds default (unscoped) credentials to the effective registry without verifying if the registry was changed by a lower-trust configuration layer. An attacker can exploit this by providing a malicious repository with a custom `registry` setting in `.npmrc`, capturing the victim's credentials when they run `pnpm install` or `pnpm view`. The issue is fixed in versions 10.34.0 and 11.4.0.

## Affected products

- pnpm pnpm < 10.34.0, >= 11.0.0 < 11.4.0

## Identifiers

- CVE-2026-50017
- GHSA-cjhr-43r9-cfmw

## Timeline

- 2026-05-28: advisory: Initial GHSA publication
- 2026-06-26: patched: Updated with patch information and CVE-2026-50017

## References

- [https://api.github.com/users/mosskappa](https://api.github.com/users/mosskappa)
- [https://github.com/mosskappa](https://github.com/mosskappa)
- [https://api.github.com/users/mosskappa/gists%7B/gist_id%7D](https://api.github.com/users/mosskappa/gists%7B/gist_id%7D)
- [https://api.github.com/users/mosskappa/repos](https://api.github.com/users/mosskappa/repos)
- [https://avatars.githubusercontent.com/u/205706019?v=4](https://avatars.githubusercontent.com/u/205706019?v=4)
- [https://api.github.com/users/mosskappa/events%7B/privacy%7D](https://api.github.com/users/mosskappa/events%7B/privacy%7D)

## Related threats

- [pnpm environment secret exfiltration via proxy settings in workspace manifest](https://junglewise.ai/threats/pnpm-environment-secret-exfiltration-via-proxy-settings-in-workspace-f6626cca)
- [pnpm pacquet path traversal in lockfile dependency symlinks](https://junglewise.ai/threats/pnpm-pacquet-path-traversal-in-lockfile-dependency-symlinks-dc3f81d1)
- [pnpm tarball dependency manifest name path traversal arbitrary file write](https://junglewise.ai/threats/cve-2026-82393-pnpm-tarball-dependency-manifest-name-path-traversal-arbitrary)
- [pnpm virtual store linker path traversal via unvalidated depPath](https://junglewise.ai/threats/cve-2026-82392-pnpm-virtual-store-linker-path-traversal-via-unvalidated-deppath)
- [pnpm path traversal via crafted lockfile alias](https://junglewise.ai/threats/cve-2026-59196-pnpm-path-traversal-via-crafted-lockfile-alias)