diff --git a/‎packages/vite/src/node/server/index.ts‎
Lines changed: 24 additions & 1 deletion b/‎packages/vite/src/node/server/index.ts‎
Lines changed: 24 additions & 1 deletion
@@ -1,4 +1,5 @@
 import path from 'node:path'
+import fs from 'node:fs'
 import { execSync } from 'node:child_process'
 import type * as net from 'node:net'
 import { get as httpGet } from 'node:http'
@@ -1228,10 +1229,10 @@ export async function resolveServerOptions(
 
   let allowDirs = server.fs.allow
 
+  const cwd = searchForPackageRoot(root)
   if (process.versions.pnp) {
     // running a command fails if cwd doesn't exist and root may not exist
     // search for package root to find a path that exists
-    const cwd = searchForPackageRoot(root)
     try {
       const enableGlobalCache =
         execSync('yarn config get enableGlobalCache', { cwd })
@@ -1251,6 +1252,28 @@ export async function resolveServerOptions(
     }
   }
 
+  // pnpm's global virtual store (GVS) may place package files outside workspace root.
+  // Read node_modules/.modules.yaml which pnpm always writes on install — this works
+  // unconditionally regardless of how Vite is launched (node / npx / pnpm run),
+  // avoiding the need for subprocess calls or user-agent sniffing.
+  const pnpmModulesYaml = path.join(cwd, 'node_modules', '.modules.yaml')
+  try {
+    const content = fs.readFileSync(pnpmModulesYaml, 'utf-8')
+    const parsed = JSON.parse(content)
+    const virtualStoreDir = parsed.virtualStoreDir
+    if (virtualStoreDir) {
+      if (path.isAbsolute(virtualStoreDir)) {
+        allowDirs.push(virtualStoreDir)
+      } else if (virtualStoreDir.startsWith('..')) {
+        allowDirs.push(
+          path.resolve(path.join(cwd, 'node_modules'), virtualStoreDir),
+        )
+      }
+    }
+  } catch {
+    // .modules.yaml not found or unreadable — not a pnpm project, skip
+  }
+
   allowDirs = allowDirs.map((i) => resolvedAllowDir(root, i))
 
   // only push client dir when vite itself is outside-of-root