Executive brief
Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
Affected products
- PyPI mage-ai
Junglewise Threat Intelligence
CVE-2024-8072: PYSEC-2026-1598 - Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
CVE-2024-8072 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: mage-ai (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1600 - Mage AI incorrectly gives privileges to users with deleted accounts
- PYSEC-2026-1601 - Mage AI Path Traversal vulnerability
- PYSEC-2026-1597 - Mage AI Path Traversal vulnerability
- PYSEC-2026-1599 - Mage AI Path Traversal vulnerability
- PYSEC-2023-64 - mage-ai is an open-source data pipeline tool for transforming and integrating data. Those who use Mage starting in version 0.8.34 and prior