CVE-2024-8072 Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
Remote unauthenticated attackers can leak terminal server command history of arbitrary users in Mage AI.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-8072?
CVE-2024-8072 is a medium-severity vulnerability in mage:mage-ai, published on 22 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
Weakness: CWE-200
Which versions are affected by CVE-2024-8072?
3 open source packages ship an affected version, including mage-ai. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
mage-ai PyPI | All versions to 0.9.73 | None |
mage-ai PyPI | All versions to 0.9.73 | None |
mage-ai PyPI | All versions to 0.9.73 | None |
Products include Mage Mage-Ai.
How do I fix CVE-2024-8072?
No fix has been published for CVE-2024-8072 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-8072 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-8072 exists.
Other vulnerabilities in mage:mage-ai
- CVE-2024-45187 Mage AI allows deleted users to use the terminal server with admin access, leading to remote code execution
- CVE-2024-45188 Mage AI file content request remote arbitrary file leak
- CVE-2024-45189 Mage AI git content request remote arbitrary file leak
- CVE-2024-45190 Mage AI pipeline interaction request remote arbitrary file leak
- CVE-2023-31143 Mage terminal user authentication not working properly
Sources
Also known as GHSA-cgrq-wvfj-v28j, PYSEC-2026-1598.