PT-2026-44044 · Unknown · Nx Console

Ashish Kurmi · Published 2026-05-27 · Updated 2026-05-28 · CVE-2026-48027

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nx Console version 18.95.0

Description Nx Console, the user interface for Nx and Lerna, had a malicious version published. This compromised version was available on the Visual Studio Marketplace for approximately 18 minutes and on OpenVSX for approximately 36 minutes on 19 May 2026.

Recommendations Upgrade to version 18.100.0.

Exploit

Fix

RCE

Weakness Enumeration

CWE-506

Related Identifiers

CVE-2026-48027

Affected Products

Nx Console

References · 14

• 🔥 https://stepsecurity.io/blog/nx-console-vs-code-extension-compromised · Exploit
• https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w · Vendor Advisory
• https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48027 · Security Note
• https://github.com/nrwl/nx-console/issues/3139 · Note
• https://reddit.com/r/pwnhub/comments/1tphhrk/cisa_adds_new_vulnerabilities_to_cybersecurity · Reddit Post
• https://twitter.com/zerotalktoai/status/2059698777359835521 · Twitter Post
• https://twitter.com/CISACyber/status/2059697669157609976 · Twitter Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48027 · Note
• https://twitter.com/CCBalert/status/2060008406048555198 · Twitter Post
• https://twitter.com/OrizonCyber/status/2059756586483007683 · Twitter Post
• https://twitter.com/Leila97726926/status/2060021359908966761 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1tpz4cf/top_10_trending_cves_28052026 · Reddit Post
• https://twitter.com/vuldb/status/2059861783167521046 · Twitter Post