Mage AI - Insecure Default Authentication Setup

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...

lftakakura-mage-ai (0.9.37a1), mage-ai (>=0.7.88, <=0.9.74) potentially affected by CVE-2026-86049 via jupyter-server (1.23.5)

jupyter-server PYPI version 1.23.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - lftakakura-mage-ai 0.9.37a1 - mage-ai =0.7.88, =0.9.74 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

lftakakura-mage-ai (0.9.37a1), mage-ai (>=0.7.88, <=0.9.74) potentially affected by CVE-2026-86049 via jupyter-server (1.23.5)

jupyter-server PYPI version 1.23.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - lftakakura-mage-ai 0.9.37a1 - mage-ai =0.7.88, =0.9.74 Source cves: CVE-2026-86049 Source advisory: OSV:GHSA-C3MW-737P-C7G2...

CVE-2026-81030

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mageai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling...

CVE-2026-81030 Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpoint

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mageai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling...

CVE-2026-81030 Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpoint

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mageai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling...

CVE-2026-81030

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mageai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling...

CVE-2026-81030 Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpoint

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mageai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling...

CVE-2026-81030

Mage AI through version 0.9.79 is affected by an arbitrary file read via its browser-items API endpoint. The BrowserItemResource in mage_ai/api/resources/BrowserItemResource.py passes a caller-supplied path to filesystem read/write helpers without invoking the containment helper that its sibling ...

EUVD-2026-66606

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mageai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling...

CVE-2026-81030: Improper Limitation of a Pathname to a Restricted Directory

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mageai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling...

PT-2026-82218

Name of the Vulnerable Software and Affected Versions Mage AI affected versions not specified Description The browser-items API does not restrict accepted paths to the project directory. Specifically, the BrowserItemResource in mage ai/api/resources/BrowserItemResource.py passes caller-supplied...

Mage AI - Insecure Default Authentication Setup Detection

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...

Mage AI Panel - Detect

Mage AI mage.ai / github.com/mage-ai/mage-ai is an open-source data pipeline + orchestration platform with a notebook-style UI. Self-hosted instances default to TCP 6789 and historically have shipped without authentication. Exposed instances may reveal pipeline source, secrets, and provide an...

lftakakura-mage-ai (0.9.37a1), mage-ai (>=0.7.88, <=0.9.74) potentially affected by CVE-2026-5422 via jupyter-server (1.23.5)

jupyter-server PYPI version 1.23.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - lftakakura-mage-ai 0.9.37a1 - mage-ai =0.7.88, =0.9.74 Source cves: CVE-2026-5422 Source advisory: OSV:PYSEC-2026-2532...

Mage AI Path Traversal vulnerability

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request...

PYSEC-2026-1597 Mage AI Path Traversal vulnerability

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request...

PYSEC-2026-1600 Mage AI incorrectly gives privileges to users with deleted accounts

Guest users in the Mage AI framework that remain logged in after their accounts are deleted, are mistakenly given high privileges and specifically given access to remotely execute arbitrary code through the Mage AI terminal server...

PYSEC-2026-1599 Mage AI Path Traversal vulnerability

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request...

Mage AI Path Traversal vulnerability

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request...