Is CVE-2026-44479 actively exploited?

No active exploitation of CVE-2026-44479 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-44479 be exploited remotely?

No. CVE-2026-44479 requires local access to exploit.

What is the CVSS score of CVE-2026-44479?

CVE-2026-44479 has a CVSS score of 5.5 (MEDIUM).

HOME VULNERABILITIESCVE-2026-44479

MEDIUM

CVE-2026-44479

CWE-200Published: May 13, 2026· Updated: May 13, 2026

5.5

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:1.9th

Official Description

Vercel’s AI Cloud is a unified platform for building modern applications. From 50.16.0 to 52.0.0, hen the Vercel CLI runs in non-interactive mode (--non-interactive or auto-detected AI agent), commands that cannot complete autonomously emit JSON payloads with suggested follow-up commands. If the user authenticated via --token or -t on the command line, the token value is included verbatim in those suggestions. The plaintext token may be captured in CI/CD logs, agent transcripts, or other automation output. This vulnerability is fixed in 52.0.1.

NVD Source

Technical Analysis

CVE-2026-44479 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 5.5.

From a weakness classification perspective (CWE-200): Information exposure vulnerabilities leak sensitive data to unauthorized actors.