Read the docs

Mage

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mage records in CISA KEV

No Mage vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mage-ai 6 records MEDIUM

Records

7 records

TI-2024-30287 CVE-2024-45190 · GHSA-4mrc-w7jh-hx4j

Mage AI pipeline interaction request remote arbitrary file leak

Priority MEDIUM 62

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00859 Published 2024-08-23 No fix listed CWE-35
TI-2024-30285 CVE-2024-45188 · GHSA-v9wr-8wrm-h6p7

Mage AI file content request remote arbitrary file leak

Priority MEDIUM 62

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00881 Published 2024-08-23 No fix listed CWE-22
TI-2026-76073 CVE-2026-111823 · GHSA-93gm-r5p2-wxq7

Unknown OAuth provider lets Mage OSS create sessions

Priority MEDIUM 50

Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00556 Published 2026-10-16 No fix listed CWE-390
TI-2024-30284 CVE-2024-45187 · GHSA-jg95-r9xh-xw9c

Mage AI allows deleted users to use the terminal server with admin access, leading to remote code execution

Priority MEDIUM 41

Guest users in the Mage AI framework that remain logged in after their accounts are deleted, are mistakenly given high privileges and specifically given access to remotely execute arbitrary code through the Mage AI termi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00495 Published 2024-08-23 No fix listed CWE-613
TI-2024-30286 CVE-2024-45189 · GHSA-cgxv-795x-3vqr

Mage AI git content request remote arbitrary file leak

Priority LOW 31

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00881 Published 2024-08-23 No fix listed CWE-22
Open these records in search →