diff --git a/hermes_cli/npm_engine.py b/hermes_cli/npm_engine.py
index 12c25d64b0e58..49ad23a792c88 100644
--- a/hermes_cli/npm_engine.py
+++ b/hermes_cli/npm_engine.py
@@ -5,7 +5,7 @@ pins an ``engines.npm`` range, so an npm outside that range aborts every
 ``npm ci`` / ``npm install`` we run inside the checkout::
 
     npm error code EBADENGINE
-    npm error notsup Required: {"node":">=20.0.0","npm":"<11.10.0 || >=12.0.0"}
+    npm error notsup Required: {"node":">=20.0.0","npm":">=11.17.0"}
     npm error notsup Actual:   {"npm":"10.9.8","node":"v22.23.1"}
 
 Rather than predicting the failure (which would mean a semver range matcher and
diff --git a/package-lock.json b/package-lock.json
index d6e44fc4cd371..d3f16014caa99 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -30,7 +30,7 @@
       },
       "engines": {
         "node": ">=20.0.0",
-        "npm": ">=12.0.0"
+        "npm": ">=11.17.0"
       }
     },
     "apps/bootstrap-installer": {
diff --git a/package.json b/package.json
index 7ba15ff549abb..7a5e95a126ec6 100644
--- a/package.json
+++ b/package.json
@@ -54,7 +54,7 @@
   },
   "engines": {
     "node": ">=20.0.0",
-    "npm": ">=12.0.0"
+    "npm": ">=11.17.0"
   },
   "allowScripts": {
     "unicode-animations": false,
diff --git a/website/package.json b/website/package.json
index bb752328ad8cb..e3b8477835031 100644
--- a/website/package.json
+++ b/website/package.json
@@ -54,7 +54,7 @@
   },
   "engines": {
     "node": ">=20.0",
-    "npm": "<11.10.0 || >=12.0.0"
+    "npm": ">=11.17.0"
   },
   "allowScripts": {
     "core-js@3.49.0": true,