CVE-2024-45187: high-severity vulnerability in mage-ai
Mage AI allows deleted users to use the terminal server with admin access, leading to remote code execution
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 0.5%
Guest users in the Mage AI framework that remain logged in after their accounts are deleted, are mistakenly given high privileges and specifically given access to remotely execute arbitrary code through the Mage AI terminal server
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
mage-aiRelated CVEs — mage-ai
In the same product, most dangerous first.
CVE-2024-45189MEDIUMMage AI git content request remote arbitrary file leakEPSS 0.9%CVE-2024-45188MEDIUMMage AI file content request remote arbitrary file leakEPSS 0.9%CVE-2024-45190MEDIUMMage AI pipeline interaction request remote arbitrary file leakEPSS 0.9%CVE-2024-8072MEDIUMMage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary usersEPSS 0.6%