CVE-2026-81101: Airtable MCP CLI before 0.2.5 Credential Disclosure via Unvalidated Configured Endpoint

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-27 · updated 2026-09-24
Weakness: CWE-200

Description

The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted the environment-variable form of the same setting to the vendor's own hosts over HTTPS. Because the connect path in src/mcp.ts attaches the stored token as a bearer credential on every request to the configured endpoint, a user who was persuaded to run configure with an endpoint of the attacker's choosing sent their personal access token to that destination on each subsequent invocation. Version 0.2.5 applies the same helper to the option.

Affected products

airtable-mcp-cli: before 0.2.5 — fixed in 0.2.5

How to fix

Upgrade to a fixed version: airtable-mcp-cli 0.2.5. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-81101 or the next vulnerability affects your stack