Executive brief
Vercel CLI is a command-line tool used by developers to manage and deploy web applications. A security issue in certain versions causes sensitive authentication tokens to be printed in plain text when the tool is used in automated environments like CI/CD pipelines or AI agents. If these logs are captured or visible to unauthorized individuals, they could use the exposed tokens to gain full access to the associated Vercel account and its projects.
Technical details
A sensitive information disclosure vulnerability exists in the Vercel CLI when operating in non-interactive mode (triggered by the --non-interactive flag or AI agent auto-detection). When a command fails to complete autonomously, the CLI generates a JSON payload containing suggested follow-up commands; if the user provided an authentication token via the --token or -t command-line arguments, that token is included verbatim in the output. This behavior leads to token exposure in CI/CD logs, build transcripts, or automation audit trails. The vulnerability does not affect users who authenticate via the VERCEL_TOKEN environment variable. Attackers with access to these logs can obtain high-privilege credentials. The issue is resolved in version 52.0.1.
Affected products
- Vercel Vercel CLI 50.16.0 to 52.0.0
Timeline
- 2026-04-30: advisory: GitHub Security Advisory published
- 2026-05-13: disclosed: CVE published to NVD