Vulnerability · Published Aug 27, 2026 · Assigned by VulnCheck

CVE-2026-81101Airtable MCP CLI before 0.2.5 Credential Disclosure via Unvalidated Configured Endpoint

Medium 6.5

In plain English

A medium-severity information exposure in airtable-mcp-cli from Airtable. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.4%top 61.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted the environment-variable form of the same setting to the vendor's own hosts over HTTPS. Because the connect path in src/mcp.ts attaches the stored token as a bearer credential on every request to the configured endpoint, a user who was persuaded to run configure with an endpoint of the attacker's choosing sent their personal access token to that destination on each subsequent invocation. Version 0.2.5 applies the same helper to the option.

Affected products (as reported)

Vendor	Product	Versions
Airtable	airtable-mcp-cli	0 – before 0.2.5

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References

https://github.com/Airtable/airtable-mcp-cli product
https://github.com/Airtable/airtable-mcp-cli/pull/17 issue-tracking, patch
VulnCheck Advisory: Airtable MCP CLI before 0.2.5 Credential Disclosure via Unvalidated Configured Endpoint third-party-advisory