CVE-2026-111823Critical· 9.8▾ AbyssalPoC availableMage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 53.9 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 17.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.4%
1 GitHub repo
Last analysed / modified upstream
0.4% → 0.6%
Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.
mage-ai <= 0.9.80On 2026-10-16, Mage merged PR #6204 (4fc5e1860260c4f772d852a28323eb65405178df) to reject unverified OAuth identities and PR #6205 (4a8904fcd2765859bd4e2b87fb284dabddb13c83) to harden version-control command execution and subprocess timeout/cancellation. These address the reported authentication bypass and shell-injection path in source. PR #6207 (9c6331991c5e6e43d755bd59c151864ef28fdc11) also removes the four version-control policy overrides used by the zero-role chain. No fixed released package or container image has been established; PyPI 0.9.80 predates these merges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-45188Medium· 6.5Mage AI Path Traversal vulnerability
CVE-2024-45187High· 7.1Mage AI incorrectly gives privileges to users with deleted accounts
CVE-2024-45189Medium· 6.5Mage AI Path Traversal vulnerability
CVE-2024-8072Medium· 5.3Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
CVE-2024-45190Medium· 6.5Mage AI Path Traversal vulnerability
CVE-2025-26465Medium· 6.8A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled