Read the docs
TI-2026-32418 Aliases CVE-2026-44479GHSA-pgf8-2hgj-grqg

Vercel: Non-interactive mode includes CLI arguments in suggested command output

Priority LOW 24CWE-200Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-200.

Summary

Vercel’s AI Cloud is a unified platform for building modern applications. From 50.16.0 to 52.0.0, hen the Vercel CLI runs in non-interactive mode (--non-interactive or auto-detected AI agent), commands that cannot complete autonomously emit JSON payloads with suggested follow-up commands. If the user authenticated via --token or -t on the command line, the token value is included verbatim in those suggestions. The plaintext token may be captured in CI/CD logs, agent transcripts, or other automation output. This vulnerability is fixed in 52.0.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0016 5th percentileScored 2026-11-07
Fix Fixed vercel (vercel): 52.0.1vercel (npm): 52.0.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
vercelvercel50.16.0 to before 52.0.152.0.1Patch availableCNA
—vercel (npm)50.16.0 to before 52.0.152.0.1Patch availableGHSA-pgf8-2hgj-grqg
  • vercel Vendorvercel Affected 50.16.0 to before 52.0.1 Fixed in 52.0.1 Patch available CNA
  • vercel (npm) Vendor— Affected 50.16.0 to before 52.0.1 Fixed in 52.0.1 Patch available GHSA-pgf8-2hgj-grqg

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:vercel:vercel:*:-:*:*:*:node.js:*:*50.16.0 to before 52.0.1Vulnerablevercel
  • cpe:2.3:a:vercel:vercel:*:-:*:*:*:node.js:*:* Versions 50.16.0 to before 52.0.1 Vulnerable ·vercel

Remediation

  • Fix · CNA vercel (vercel) Fixed in 52.0.1
  • Fix · GHSA-pgf8-2hgj-grqg vercel (npm) Fixed in 52.0.1 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-44479
  2. 2026-10-03 Alias added: GHSA-pgf8-2hgj-grqg

References

Advisory 2

Other 1

  • TI-2025-31133 Next.js cache poisoning due to omission of Vary header CVSS 3.1LOW 3.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences