Mage AI insecure default initialization of resource
Researchers discovered that Mage AI v0.9.75 lacks proper default user authentication, allowing unauthenticated access to the application. An attacker could exploit this to achieve zero-click remote code execution by adding custom Python code blocks that execute arbitrary OS commands.
What happened
Mage AI v0.9.75 lacks proper user authentication by default, allowing anyone to access the application without authentication. Although an option to enable user authentication exists, it is not prominently displayed.
Reported impact
An attacker could achieve zero-click remote code execution (RCE) by exploiting the lack of authentication. An attacker can add a custom Python block in the pipeline feature without restriction and import the OS module to execute arbitrary OS commands on the target machine.
Index analysis
The vulnerability stems from insecure default configuration with an unauthenticated web service accessible over the network. An attacker can import Python modules and execute OS commands via reverse shell without user interaction.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.