PT-2025-10456 · Mage Ai · Mage Ai

Aden Yap + 1 · Published 2025-03-09 · Updated 2025-09-18 · CVE-2025-2129

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mage AI version 0.9.75

Description A vulnerability was found in Mage AI, which has been classified as problematic. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high and the exploitability is told to be difficult. The real existence of this vulnerability is still doubted at the moment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2025-2129

Affected Products

Mage Ai

References · 9

• 🔥 https://github.com/zn9988/publications/blob/main/2.Mage-AI%20-%20Insecure%20Default%20Authentication%20Setup%20Leading%20to%20Zero-Click%20RCE/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-2129 · Security Note
• https://t.me/cvetracker/18777 · Telegram Post
• https://vuldb.com/?submit.510690 · Note
• https://vuldb.com/?ctiid.299049 · Note
• https://vuldb.com/?id.299049 · Note
• https://twitter.com/CVEnew/status/1898835167994593543 · Twitter Post
• https://twitter.com/Cezar_H_Linux/status/1968653514541781220 · Twitter Post
• https://t.me/cvedetector/19930 · Telegram Post