MA
Product
mage-ai
7
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 1Medium 4Low 0
Watch
Add mage-ai to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111823 | 9.8 | Oct 16 | Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider Affected: through 0.9.80 |
| CVE-2023-31143 | 9.8 | May 9 | Mage terminal user authentication not working properly Affected: 0.8.34 before 0.8.72 |
| CVE-2024-45187 | 8.8 | Aug 23 | Mage AI allows deleted users to use the terminal server with admin access, leading to remote code execution Affected: 0 |
| CVE-2024-45190 | 6.5 | Aug 23 | Mage AI pipeline interaction request remote arbitrary file leak Affected: 0 |
| CVE-2024-45189 | 6.5 | Aug 23 | Mage AI git content request remote arbitrary file leak Affected: All versions, or not specified |
| CVE-2024-45188 | 6.5 | Aug 23 | Mage AI file content request remote arbitrary file leak Affected: 0 |
| CVE-2024-8072 | 5.3 | Aug 22 | Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users Affected: 0 |
Showing 7
