CVE-2026-44479 Details
Description
Vercel’s AI Cloud is a unified platform for building modern applications. From 50.16.0 to 52.0.0, hen the Vercel CLI runs in non-interactive mode (--non-interactive or auto-detected AI agent), commands that cannot complete autonomously emit JSON payloads with suggested follow-up commands. If the user authenticated via --token or -t on the command line, the token value is included verbatim in those suggestions. The plaintext token may be captured in CI/CD logs, agent transcripts, or other automation output. This vulnerability is fixed in 52.0.1.
A vulnerability exists in Vercel's AI Cloud CLI versions 50.16.0 prior to 52.0.0. When the CLI operates in non-interactive mode, either through an explicit flag or automatic detection of an AI agent, certain commands that require user input generate JSON responses with suggested follow-up actions. If the user has authenticated using the '--token' or '-t' option, the token is included in these suggestions. This plaintext token can then be logged in CI/CD pipelines, agent transcripts, or other automated outputs.
Users should upgrade to Vercel CLI version 52.0.1 or later. If the '--token' option was used with '--non-interactive' in the past, review logs for exposed tokens and rotate them. It is recommended to use the 'VERCEL_TOKEN' environment variable for authentication.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/vercel/vercel/security/advisories/GHSA-pgf8-2hgj-grqg | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor | [email protected] |
| CWE-532 | Insertion of Sensitive Information into Log File | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| vercel vercel | >= 50.16.0, < 52.0.1 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 4, 2026 | Initial Analysis | [email protected] |
| May 13, 2026 | New CVE Received | [email protected] |