CRITICAL 9.8 NVD

CVE-2026-111823

Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

References

https://github.com/mage-ai/mage-ai/pull/6204
https://github.com/mage-ai/mage-ai/pull/6204/changes/76c4f467f3654041d8899b1c4447a985710d2
https://github.com/mage-ai/mage-ai/pull/6205
https://thecoregroup.net/category/the-core-group/

Published: 2026-10-17 · Source: NVD · Feed updated: 2026-10-17

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-10-17 via NVD.

Risk Timeline

CVE Disclosed2026-10-17 · -1 days ago

Remediation Resources

GitHub

github.com/mage-ai/mage-ai/pull/6204

GitHub

github.com/mage-ai/mage-ai/pull/6204/changes/76c4f467f3654041d8899b1c4

Analysis & PoC

thecoregroup.net/category/the-core-group/

vulnfeed aggregates 16429 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.