AIKIDO-2026-250983

sentry-cli is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor Pre-CVE Published 2 days ago

Medium Risk

This Affects:

sentry-cli

2.1.4 - 3.6.1

Fixed in 3.6.2

Are you affected? Scan for Free

TL;DR

The CLI loads the Sentry base URL and the authentication token independently from different configuration sources such as .sentryclirc files, environment variables, and CLI arguments. When a non-embedded auth token comes from one source and the URL from another, the token is bound to the mismatched URL instead of the value being rejected. An attacker who controls one configuration source, for example a .sentryclirc committed to a repository, can cause a token supplied elsewhere to be transmitted to an unintended server and exfiltrated. The fix binds the URL and the auth token to a single runtime source and ignores a conflicting value from another source with a warning.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and provide the Sentry URL and a non-embedded auth token from different configuration sources.