Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-81101— Airtable MCP CLI before 0.2.5 Credential Disclosure via Unvalidated Configured Endpoint

Quick assessment

Affected
Airtable airtable-mcp-cli
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

命令接受任意端点 URL，并将其与用户的访问令牌一起存储。位于 中的 将传递给其 选项的值持久化到用户配置中，但未通过 中的 函数进行校验。该辅助函数此前已限制环境变量形式的相同设置只能指向供应商自己的主机，且必须使用 HTTPS。由于 中的连接路径会在每个发往所配置端点的请求中，将存储的令牌作为 Bearer 凭证附加，因此，如果用户被诱导使用攻击者指定的端点运行 ，那么后续每次调用时，用户的个人访问令牌都会被发送到该攻击者控制的地址。版本 0.2.5 已对该选项应用了相同的 校验逻辑。

CVSS 6.5 · Medium

Affected Version Matrix 1

VendorProduct Version RangeStatus
Airtable airtable-mcp-cli < 0.2.5 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-81101

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Airtable MCP CLI before 0.2.5 Credential Disclosure via Unvalidated Configured Endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted the environment-variable form of the same setting to the vendor's own hosts over HTTPS. Because the connect path in src/mcp.ts attaches the stored token as a bearer credential on every request to the configured endpoint, a user who was persuaded to run configure with an endpoint of the attacker's choosing sent their personal access token to that destination on each subsequent invocation. Version 0.2.5 applies the same helper to the option.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Airtable airtable-mcp-cli 0 ~ 0.2.5 -

II. Public POCs for CVE-2026-81101

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-81101

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-81101 (1)

Vendor Advisories for CVE-2026-81101 (1)

Vendor Pages for CVE-2026-81101 (1)

IV. Related Vulnerabilities

Same vendor: Airtable
Same weakness: CWE-200

V. Comments for CVE-2026-81101

No comments yet

Leave a comment