PT-2026-38406 · Vercel · Vercel Cli

Resrianchopublished · Published 2026-05-07 · Updated 2026-05-13 · CVE-2026-44479

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Vercel CLI versions 50.16.0 through 52.0.0

Description When running in non-interactive mode (via the --non-interactive flag or auto-detected AI agent), commands that cannot complete autonomously emit JSON payloads containing suggested follow-up commands. If authentication was performed using the --token or -t command-line arguments, the token value is included in plaintext within these suggestions. This can lead to the token being captured in CI/CD logs, agent transcripts, or other automation output. This issue occurs only when the token is passed as a CLI argument; the VERCEL TOKEN environment variable is not affected.

Recommendations Update to version 52.0.1. Rotate tokens if --token was previously used with --non-interactive and logs were exposed. Use the VERCEL TOKEN environment variable for authentication instead of command-line arguments.

Fix

Information Disclosure

Insertion into Log File

Weakness Enumeration

CWE-200

CWE-532

Related Identifiers

CVE-2026-44479

GHSA-PGF8-2HGJ-GRQG

Affected Products

Vercel Cli

References · 5

• https://github.com/vercel/vercel/security/advisories/GHSA-pgf8-2hgj-grqg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44479 · Security Note
• https://osv.dev/vulnerability/GHSA-pgf8-2hgj-grqg · Vendor Advisory
• https://github.com/vercel/vercel · Note
• https://t.me/CVEtracker/53669 · Telegram Post