What’s Vulnerable › Vulnerabilities

CVE-2026-111823

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-17 · updated 2026-10-19
• Weakness: CWE-390

Description

Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

Affected products

• mage-ai: through 0.9.80

References

• https://github.com/mage-ai/mage-ai/pull/6204
• https://github.com/mage-ai/mage-ai/pull/6204/changes/76c4f467f3654041d8899b1c4447a985710d26c0
• https://github.com/mage-ai/mage-ai/pull/6205
• https://thecoregroup.net/category/the-core-group/

Get alerted when CVE-2026-111823 or the next vulnerability affects your stack