CVE-2026-81101

Description

The configure command accepted any endpoint URL and stored it beside the user-s access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted the environment-variable form of the same setting to the vendor-s own hosts over HTTPS. Because the connect path in src/mcp.ts attaches the stored token as a bearer credential on every request to the configured endpoint, a user who was persuaded to run configure with an endpoint of the attacker-s choosing sent their personal access token to that destination on each subsequent invocation. Version 0.2.5 applies the same helper to the option.