← Database

CVE-2024-45190

MEDIUM CVSS: 6.5 Published: 2024-08-23 Modified: 2026-06-17

Description

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Pipeline Interaction" request

Affected Platforms

Mage Mage-Ai

Weakness Type

CWE-35, CWE-35

References