CVE-2026-111823

Published Oct 17, 2026·Updated Oct 19, 2026

NVD Description

Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

[POC] CVE-2026-111823 — CVE-2026-111823

PoC for CVE-2026-111823 — Mage AI OAuth session auth bypass (POST /api/sessions). Check + exploit modes. Authorized testing only.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Get alerted for CVEs like this