What’s Vulnerable › Products

mage-ai vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your mage-ai version is affected

Latest mage-ai vulnerabilities

• CVE-2026-111823 — (CVSS 9.8)
• CVE-2026-81030 — Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpoint (CVSS 6.5)
• CVE-2024-45190 — Mage AI pipeline interaction request remote arbitrary file leak (CVSS 6.5)
• CVE-2024-45189 — Mage AI git content request remote arbitrary file leak (CVSS 6.5)
• CVE-2024-45188 — Mage AI file content request remote arbitrary file leak (CVSS 6.5)
• CVE-2024-45187 — Mage AI allows deleted users to use the terminal server with admin access, leading to remote code execution (CVSS 8.8)
• CVE-2024-8072 — Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users (CVSS 5.3)
• CVE-2023-31143 — Mage terminal user authentication not working properly (CVSS 9.8)