CVE-2026-81101
Received Received - Intake

Stored Credential Exposure in CLI Tool via Unsafe Endpoint Configuration

Publication date: 2026-08-27

Last updated on: 2026-08-27

Assigner: VulnCheck

Description
The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted the environment-variable form of the same setting to the vendor's own hosts over HTTPS. Because the connect path in src/mcp.ts attaches the stored token as a bearer credential on every request to the configured endpoint, a user who was persuaded to run configure with an endpoint of the attacker's choosing sent their personal access token to that destination on each subsequent invocation. Version 0.2.5 applies the same helper to the option.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-27
Last Modified
2026-08-27
Generated
2026-09-18
AI Q&A
2026-08-27
EPSS Evaluated
2026-09-15
NVD
CVE-2026-81101
EUVD
EUVD-2026-67029

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
airtable airtable_mcp_cli to 0.2.5 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an attacker to trick a user into configuring the Airtable MCP CLI with an attacker-controlled endpoint URL. The tool stores this URL alongside the user's access token without proper validation. Every subsequent request to this endpoint includes the user's token as a bearer credential, potentially exposing it to the attacker.

Detection Guidance

Check if the Airtable MCP CLI version is below 0.2.5 by running: airtable-mcp-cli --version. Inspect configuration files for unexpected endpoint URLs in ~/.config/airtable-mcp-cli or similar directories. Monitor network traffic for unauthorized outbound connections to untrusted endpoints.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access to your Airtable account. An attacker could steal your access token and gain control over your data, perform actions on your behalf, or access sensitive information stored in your Airtable bases.

Compliance Impact

This vulnerability could lead to unauthorized access to personal data if an attacker intercepts the user's access token. Under GDPR, this may constitute a breach requiring notification to authorities and affected individuals. For HIPAA, exposure of access tokens could allow unauthorized access to protected health information, violating compliance requirements.

Mitigation Strategies

Upgrade to Airtable MCP CLI version 0.2.5 or later using your package manager. Review and remove any untrusted endpoint configurations. Rotate your Airtable access token if you suspect exposure. Verify no unauthorized tokens were sent to attacker-controlled endpoints.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81101. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart