https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:26:23 +0000 https://vulnerability.circl.lu/vuln/cve-2026-81101 <p><strong>Affected:</strong> airtable-mcp-cli</p> <p>The configure command accepted any endpoint URL and stored it beside the user&#39;s access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted the environment-variable form of the same setting to the vendor&#39;s own hosts over HTTPS. Because the connect path in src/mcp.ts attaches the stored token as a bearer credential on every request to the configured endpoint, a user who was persuaded to run configure with an endpoint of the attacker&#39;s choosing sent their personal access token to that destination on each subsequent invocation. Version 0.2.5 applies the same helper to the option.</p> <p><strong>Affected:</strong> airtable-mcp-cli</p> <p>The configure command accepted any endpoint URL and stored it beside the user&#39;s access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted the environment-variable form of the same setting to the vendor&#39;s own hosts over HTTPS. Because the connect path in src/mcp.ts attaches the stored token as a bearer credential on every request to the configured endpoint, a user who was persuaded to run configure with an endpoint of the attacker&#39;s choosing sent their personal access token to that destination on each subsequent invocation. Version 0.2.5 applies the same helper to the option.</p> https://vulnerability.circl.lu/vuln/cve-2026-81101