The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
MediumVulnerability
CVE-2026-44479: Vercel’s AI Cloud is a unified platform for building modern applications. From 50.16.0 to 52.0.0, hen the Vercel CLI…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-44479
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2026-44479 affects the Vercel CLI from 50.16.0 through 52.0.0. In non-interactive mode, including when an AI agent is auto-detected, commands that cannot complete autonomously emit JSON payloads with suggested follow-up commands. If the user authenticated with --token or -t on the command line, the token value appears verbatim in those suggestions, where it may be captured in CI/CD logs, agent transcripts or other automation output.
Mitigation
This vulnerability is fixed in 52.0.1.