Airtable Mcp Cli
Monthly
Token exfiltration in airtable-mcp-cli before 0.2.5 allows an attacker who convinces a user to run the configure command with a malicious endpoint URL to receive the user's Airtable personal access token on every subsequent CLI invocation. The root cause is that ConfigureCommand.execute in src/cli.ts persisted the --endpoint option directly into the user profile, bypassing the createSafeUrl helper in src/config.ts that already enforced HTTPS and vendor-host restrictions for the environment-variable pathway. Because src/mcp.ts attaches the stored token as a bearer credential on every outbound request, the stolen token grants full API-level access to the victim's Airtable account. No public exploit or CISA KEV listing has been identified at time of analysis.
Token exfiltration in airtable-mcp-cli before 0.2.5 allows an attacker who convinces a user to run the configure command with a malicious endpoint URL to receive the user's Airtable personal access token on every subsequent CLI invocation. The root cause is that ConfigureCommand.execute in src/cli.ts persisted the --endpoint option directly into the user profile, bypassing the createSafeUrl helper in src/config.ts that already enforced HTTPS and vendor-host restrictions for the environment-variable pathway. Because src/mcp.ts attaches the stored token as a bearer credential on every outbound request, the stolen token grants full API-level access to the victim's Airtable account. No public exploit or CISA KEV listing has been identified at time of analysis.