Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2026-111823

Authentication Bypass via Unverified OAuth Provider in Mage AI

Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Mage
Products
Mage-ai
CVE-2026-81030

Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpoint

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mage_ai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling FileContentResource and FileResource classes both use, so the resource contains no such call while those two contain several. A user holding the Viewer role, which grants read access within the project and nothing outside it, can therefore read any file the server process can read by supplying an absolute path. The permission model that would otherwise separate roles is not consulted for this route in the default configuration, because the setting that enables it defaults to false. Callers holding the Editor role additionally write through the same unconfined path, though that role is already able to execute code by design, so the boundary crossed by this flaw is the read available to the Viewer role.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Mage Mage Ai
Products
Mage-ai Mage Ai
CVE-2026-11436

Mage AI Sign-in Flow index.tsx useMutation cross site scripting

A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mage_ai/frontend/components/Sessions/SignForm/index.tsx of the component Sign-in Flow. Performing a manipulation of the argument query.redirect_url results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Mage Mage Ai
Products
Mage-ai Mage Ai
CVE-2024-8072

Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users

Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Mage
Products
Mage-ai
CVE-2024-45187

Mage AI allows deleted users to use the terminal server with admin access, leading to remote code execution

Guest users in the Mage AI framework that remain logged in after their accounts are deleted, are mistakenly given high privileges and specifically given access to remotely execute arbitrary code through the Mage AI terminal server

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Mage
Products
Mage-ai
CVE-2024-45188

Mage AI file content request remote arbitrary file leak

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mage
Products
Mage-ai
CVE-2024-45190

Mage AI pipeline interaction request remote arbitrary file leak

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mage
Products
Mage-ai
CVE-2023-31143

Mage terminal user authentication not working properly

mage-ai is an open-source data pipeline tool for transforming and integrating data. Those who use Mage starting in version 0.8.34 and prior to 0.8.72 with user authentication enabled may be affected by a vulnerability. The terminal could be accessed by users who are not signed in or do not have editor permissions. Version 0.8.72 contains a fix for this issue.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Mage
Products
Mage-ai
CVE-2024-45189

Mage AI git content request remote arbitrary file leak

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mage
Products
Mage-ai