{"id":"CVE-2026-111823","kind":"vulnerability","aliases":["CVE-2026-111823"],"related":[],"title":"Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider","description":"Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.","summary":"Mage OSS up to 0.9.80 (the latest release as of 23 Oct 2026) can create a login session from an unverified OAuth provider/token in the session-create API, so an unauthenticated attacker may get a session. The fix is commit 76c4f46 on master, and no release containing it was found.","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"mage-ai","fixed":[],"affected":"<= 0.9.80, before commit 76c4f46","ecosystem":"pypi"}],"ecosystems":[],"tags":["authentication-bypass","mage-oss","oauth","other","self-hosted"],"not_affected_if":["not-internet-exposed","unknown"],"how_to_check":"Run 'pip show mage-ai' (or check the Docker image tag). Version 0.9.80 or older, without commit 76c4f46, is affected. Check whether the Mage UI/API is reachable by untrusted networks. Whether it matters when OAuth is not configured is unconfirmed.","fix":"No release containing 76c4f46 found yet (latest is 0.9.80). Build from the mage-ai/mage-ai repo at 76c4f467f3654041d8899b1c4447a985710d26c0 or later, or upgrade once a release after 0.9.80 ships. Until then, do not expose Mage to untrusted networks (put it behind a VPN or authenticated proxy).","status":"open","published_at":"2026-10-17T02:17:18+00:00","first_seen_at":"2026-10-23T21:57:14+00:00","triaged_at":"2026-10-23T22:04:51+00:00","updated_at":"2026-10-23T23:28:44+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-23T22:04:51Z","model":"claude-haiku-5-5","output":{"fix":"Update Mage OSS to a build that includes commit 76c4f46 or later.","reach":"unknown","impact":"high","summary":"Mage OSS through 0.9.80 creates a login session when it meets an unknown OAuth provider, instead of rejecting the request. An attacker may be able to get a valid session without proper authentication.","category":"other","who_cares":["mage-oss","self-hosted","oauth"],"confidence":0.55,"needs_auth":"no","worst_case":"Attacker obtains a session as a user without valid credentials","analyst_note":"Confirm the exact fixed release for commit 76c4f46 and whether OAuth must be enabled to be exposed; check the NVD entry and the Mage OSS repository commit.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000659,"input_tokens":2709,"output_tokens":776,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Confirm the exact fixed release for commit 76c4f46 and whether OAuth must be enabled to be exposed; check the NVD entry and the Mage OSS repository commit.","search":"'-111823':20A,23A '-2026':19A,22A '0.9.80':4A,42B,92C '2026':50B '23':48B '76c4f46':6A,79B,94C 'ai':26A 'api':66B 'attack':70B 'authent':28B 'authentication-bypass':27B 'bypass':29B 'commit':78B 'contain':85B 'creat':52B,65B 'creation':11A,99C 'cve':18A,21A 'encount':13A,101C 'fix':76B 'found':88B 'get':72B 'host':37B 'latest':44B 'login':54B 'mage':1A,25A,31B,38B,89C 'mage-ai':24A 'mage-oss':30B 'master':81B 'may':71B 'oauth':16A,33B,59B,104C 'oct':49B 'oss':2A,32B,39B,90C 'proceed':8A,96C 'provid':17A,105C 'provider/token':60B 'releas':45B,84B 'self':36B 'self-host':35B 'session':10A,55B,64B,74B,98C 'session-cr':63B 'unauthent':69B 'unknown':15A,103C 'unverifi':58B 'upon':12A,100C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-17T02:17:18+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"cve@mitre.org","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111823","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111823","severity":null,"published_at":"2026-10-17T02:17:18+00:00","modified_at":"2026-10-19T21:14:14+00:00","first_seen_at":"2026-10-23T21:57:14+00:00","fetched_at":"2026-10-23T22:28:55+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-111823:449","url":null,"severity":null,"published_at":"2026-10-23T23:28:44+00:00","modified_at":"2026-10-23T23:28:44+00:00","first_seen_at":"2026-10-23T23:28:44+00:00","fetched_at":"2026-10-23T23:28:44+00:00","note":"Read fix commit 76c4f46 (16 Oct 2026, SessionResource.py): login now rejects any token/provider not verified by a known SSO provider. Latest release on the releases page is 0.9.80 (9 Oct), which predates the commit, so no fixed release is published as far as I can see. NVD page returned nothing. The pre-fix code was not read, so whether OAuth must be enabled is unconfirmed. No PoC or exploitation found; X and HN not searched."}],"documents":[{"id":1986,"url":"https://github.com/mage-ai/mage-ai/commit/76c4f467f3654041d8899b1c4447a985710d26c0","title":"Mage OSS commit 76c4f46: Reject unverified OAuth session identities","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":1987,"url":"https://github.com/mage-ai/mage-ai/releases","title":"Mage OSS releases (latest 0.9.80, 9 Oct)","kind":"release","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}