CVE-2026-11436

MediumCVSS 4.3

Published: 06/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

A cross-site scripting vulnerability was found in Mage AI up to version 0.9.79 in the Sign-in Flow component, file mage_ai/frontend/components/Sessions/SignForm/index.tsx. Manipulation of the query.redirect_url argument allows remote XSS attacks.

Risk Assessment

The risk includes session theft, redirection to malicious sites, or other actions in the victim's browser context.

Recommendation

Upgrade Mage AI to a version above 0.9.79 or apply proper filtering for the redirect_url parameter.

Other vulnerabilities in Mage AI

CVE-2026-81030Medium
Mage AI does not confine the paths accepted by its browser-items API to the project directory. A user with the Viewer role, which grants read access within the project, can read any file the server process can read by supplying an absolute path. Users with the Editor role can also write outside the project directory.

Original NVD description (English source)

A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mage_ai/frontend/components/Sessions/SignForm/index.tsx of the component Sign-in Flow. Performing a manipulation of the argument query.redirect_url results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.