Skip to main content

Airtable

2 CVEs product

Monthly

CVE-2026-81101 Aug 27, 14:50 MEDIUM PATCH This Month

Token exfiltration in airtable-mcp-cli before 0.2.5 allows an attacker who convinces a user to run the configure command with a malicious endpoint URL to receive the user's Airtable personal access token on every subsequent CLI invocation. The root cause is that ConfigureCommand.execute in src/cli.ts persisted the --endpoint option directly into the user profile, bypassing the createSafeUrl helper in src/config.ts that already enforced HTTPS and vendor-host restrictions for the environment-variable pathway. Because src/mcp.ts attaches the stored token as a bearer credential on every outbound request, the stolen token grants full API-level access to the victim's Airtable account. No public exploit or CISA KEV listing has been identified at time of analysis.

Information Disclosure Airtable Airtable Mcp Cli
NVD GitHub
CVSS 4.0
6.9
EPSS
0.3%
CVE-2022-46155 Nov 29, 23:15 MEDIUM PATCH This Month

Airtable.js is the JavaScript client for Airtable. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable. This Insufficiently Protected Credentials vulnerability could allow attackers to obtain user credentials due to weak protection mechanisms.

Information Disclosure Node.js Airtable
NVD GitHub
CVSS 3.1
6.4
EPSS
0.4%
EPSS 0% CVSS 6.9
MEDIUM PATCH This Month

Token exfiltration in airtable-mcp-cli before 0.2.5 allows an attacker who convinces a user to run the configure command with a malicious endpoint URL to receive the user's Airtable personal access token on every subsequent CLI invocation. The root cause is that ConfigureCommand.execute in src/cli.ts persisted the --endpoint option directly into the user profile, bypassing the createSafeUrl helper in src/config.ts that already enforced HTTPS and vendor-host restrictions for the environment-variable pathway. Because src/mcp.ts attaches the stored token as a bearer credential on every outbound request, the stolen token grants full API-level access to the victim's Airtable account. No public exploit or CISA KEV listing has been identified at time of analysis.

Information Disclosure Airtable Airtable Mcp Cli
NVD GitHub
EPSS 0% CVSS 6.4
MEDIUM PATCH This Month

Airtable.js is the JavaScript client for Airtable. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable. This Insufficiently Protected Credentials vulnerability could allow attackers to obtain user credentials due to weak protection mechanisms.

Information Disclosure Node.js Airtable
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy