Airtable airtable-mcp-cli up to 0.2.4 Configure Command src/cli.ts ConfigureCommand.execute endpoint input validation

Summaryinfo

A vulnerability identified as problematic has been detected in Airtable airtable-mcp-cli up to 0.2.4. This issue affects the function ConfigureCommand.execute of the file src/cli.ts of the component Configure Command. Performing a manipulation of the argument endpoint results in input validation. This vulnerability is cataloged as CVE-2026-81101. The attack must be initiated from a local position. There is no exploit available.

Detailsinfo

A vulnerability classified as problematic has been found in Airtable airtable-mcp-cli up to 0.2.4. This affects the function ConfigureCommand.execute of the file src/cli.ts of the component Configure Command. The manipulation of the argument endpoint with an unknown input leads to a input validation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. This is going to have an impact on confidentiality. The summary by CVE is:

The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted the environment-variable form of the same setting to the vendor's own hosts over HTTPS. Because the connect path in src/mcp.ts attaches the stored token as a bearer credential on every request to the configured endpoint, a user who was persuaded to run configure with an endpoint of the attacker's choosing sent their personal access token to that destination on each subsequent invocation. Version 0.2.5 applies the same helper to the option.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2026-81101 since 08/26/2026. The exploitability is told to be easy. Attacking locally is a requirement. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading to version 0.2.5 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• Airtable

Name

• airtable-mcp-cli

Version

• 0.2.0
• 0.2.1
• 0.2.2
• 0.2.3
• 0.2.4

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion