CVE-2024-45187
Last modified
CVE-2024-45187 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Guest users in the Mage AI framework that remain logged in after their accounts are deleted, are mistakenly given high privileges and specifically given access to remotely execute arbitrary code through the Mage AI terminal server. EPSS estimates a 0.47% chance of exploitation in the next 30 days.
Description
Guest users in the Mage AI framework that remain logged in after their accounts are deleted, are mistakenly given high privileges and specifically given access to remotely execute arbitrary code through the Mage AI terminal server
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mage | Mage-Ai | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-45187?
How severe is CVE-2024-45187?
How do I fix CVE-2024-45187?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-45181An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS Wib…7.8
- CVE-2024-45182An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS Wib…5.5
- CVE-2024-45183An issue was discovered in Samsung Mobile Processor Exynos 2…6.5
- CVE-2024-45184An issue was discovered in Samsung Mobile Processor, Wearabl…6.2
- CVE-2024-45185An issue was discovered in Samsung Mobile Processor, Wearabl…5.1
- CVE-2024-45186FileSender before 2.49 allows server-side template injection…9.8
- CVE-2024-45188Mage AI allows remote users with the "Viewer" role to leak a…6.5
- CVE-2024-45189Mage AI allows remote users with the "Viewer" role to leak a…6.5
- CVE-2024-4519A vulnerability was found in Campcodes Complete Web-Based Sc…6.1
- CVE-2024-45190Mage AI allows remote users with the "Viewer" role to leak a…6.5
- CVE-2024-45191An issue was discovered in Matrix libolm through 3.2.16. The…5.3
- CVE-2024-45192An issue was discovered in Matrix libolm through 3.2.16. Cac…5.3
Are you affected by CVE-2024-45187?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST