CVE-2026-111823

Source
https://cve.org/CVERecord?id=CVE-2026-111823
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111823.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-111823
Published
2026-10-16T23:16:29Z
Modified
2026-10-17T10:46:00Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

Database specific
{
    "cna_assigner":  "mitre",
    "cwe_ids":  [
        "CWE-390"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111823.json"
}
References

Affected packages

Git / github.com/mage-ai/mage-ai

Affected ranges

Type
GIT
Repo
https://github.com/mage-ai/mage-ai
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
Database specific
Show details
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "0.9.80"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

0.*
0.7.74
0.7.84
0.7.90
0.7.98
0.8.11
0.8.15
0.8.2
0.8.24
0.8.27
0.8.29
0.8.3
0.8.37
0.8.44
0.8.52
0.8.58
0.8.69
0.8.75
0.8.78
0.8.83
0.8.86
0.8.93
0.9.0
0.9.10
0.9.11
0.9.14
0.9.16
0.9.19
0.9.21
0.9.23
0.9.26
0.9.28
0.9.30
0.9.34
0.9.35
0.9.38
0.9.4
0.9.41
0.9.43
0.9.45
0.9.46
0.9.48
0.9.50
0.9.59
0.9.60
0.9.62
0.9.63
0.9.64
0.9.65
0.9.66
0.9.68
0.9.70
0.9.71
0.9.72
0.9.73
0.9.74
0.9.75
0.9.76
0.9.77
0.9.78
0.9.79
0.9.8
0.9.80

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111823.json"